Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityKEVEPSS 6.6%Apr 9, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityKEVEPSS 99.9%Mar 10, 2025
- High7.5Apache OFBiz Forced Browsing VulnerabilityKEVEPSS 100.0%Sep 4, 2024
- Critical9.8Apache OFBiz Incorrect Authorization VulnerabilityKEVEPSS 99.4%Aug 5, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityKEVEPSS 100.0%Jul 1, 2024
- Critical9.8Apache OFBiz Path Traversal VulnerabilityKEVEPSS 99.9%May 8, 2024
- Critical9.8Apache HugeGraph-Server Improper Access Control VulnerabilityKEVEPSS 99.2%Apr 22, 2024
- Critical9.8Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.9%Oct 27, 2023
- High7.5HTTP/2 Rapid Reset Attack VulnerabilityKEVEPSS 100.0%Oct 10, 2023
- Critical9.8Apache RocketMQ Command Execution VulnerabilityKEVEPSS 96.6%May 24, 2023
- Critical9.8Apache Superset Insecure Default Initialization of Resource VulnerabilityKEVEPSS 97.4%Apr 24, 2023
- High8.8Apache Spark Command Injection VulnerabilityKEVEPSS 93.2%Jul 18, 2022
- Critical9.8Apache CouchDB Insecure Default Initialization of Resource VulnerabilityKEVEPSS 92.5%Apr 26, 2022
- Critical9.8Apache APISIX Authentication Bypass VulnerabilityKEVEPSS 96.1%Feb 11, 2022
- Critical9.0Apache Log4j2 Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Dec 14, 2021
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityKEVEPSS 100.0%Dec 10, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityKEVEPSS 100.0%Oct 7, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityKEVEPSS 100.0%Oct 5, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)KEVEPSS 100.0%Sep 16, 2021
- High7.8System Information Library for Node.JS Command InjectionKEVEPSS 90.7%Feb 16, 2021
- High7.5Apache Flink Improper Access Control VulnerabilityKEVEPSS 97.8%Jan 5, 2021
- Critical9.8Apache Struts Remote Code Execution VulnerabilityKEVEPSS 95.9%Dec 10, 2020
- Critical9.8Apache Airflow's Experimental API Authentication BypassKEVEPSS 99.8%Nov 10, 2020
- High8.8Apache Airflow Command InjectionKEVEPSS 99.2%Jul 16, 2020
46 records · page 1 of 2
PreviousNext