← Back

Apache

apache

3,367 CVEs • 391 products

Products (391)

Click to collapse
Toggle
Http Server
http_server
Tomcat
tomcat
Airflow
airflow
Struts
struts
Camel
camel
Ofbiz
ofbiz
Activemq
activemq
Superset
superset
Cxf
cxf
Cloudstack
cloudstack
Openoffice
openoffice
Nifi
nifi
Subversion
subversion
Solr
solr
Inlong
inlong
Hadoop
hadoop
Wicket
wicket
Thrift
thrift
Ranger
ranger
Openmeetings
openmeetings
Jspwiki
jspwiki
Apisix
apisix
Tika
tika
Ambari
ambari
Zeppelin
zeppelin
Shiro
shiro
Syncope
syncope
Kylin
kylin
Answer
answer
Hive
hive
Geode
geode
Spark
spark
Fineract
fineract
Couchdb
couchdb
Archiva
archiva
Log4j
log4j
Iotdb
iotdb
Pulsar
pulsar
Dubbo
dubbo
Cordova
cordova
Linkis
linkis
Kafka
kafka
Streampark
streampark
Qpid
qpid
Cassandra
cassandra
Hertzbeat
hertzbeat
Qpid Broker J
qpid_broker-j
Atlas
atlas
Nimble
nimble
Artemis
artemis
James
james
Roller
roller
Storm
storm
Jmeter
jmeter
Spamassassin
spamassassin
Guacamole
guacamole
Karaf
karaf
Allura
allura
Druid
druid
Xerces C++
xerces-c++
Apr Util
apr-util
Tapestry
tapestry
Zookeeper
zookeeper
Ozone
ozone
Fory
fory
Batik
batik
Geronimo
geronimo
Httpclient
httpclient
Poi
poi
Pdfbox
pdfbox
Tomee
tomee
Ignite
ignite
Mesos
mesos
Nuttx
nuttx
Shenyu
shenyu
Derby
derby
Mina
mina
Axis
axis
Bookkeeper
bookkeeper
Impala
impala
Qpid Proton J
qpid_proton-j
Mina Sshd
mina_sshd
Avro
avro
Doris
doris
Streampipes
streampipes
Mod Python
mod_python
Jackrabbit
jackrabbit
Axis2
axis2
Hbase
hbase
Drill
drill

CVEs (3,367)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apache
1Http Server
Apr 16, 2026
Aug 7, 1998
N/A· v4
N/A· v3
10.0 HIGH· v2
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.
1Apache
1Http Server
Apr 16, 2026
Dec 30, 1997
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
1Apache
1Http Server
Apr 16, 2026
Sep 1, 1997
N/A· v4
N/A· v3
7.5 HIGH· v2
Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
2Apache
Illinois
2Http Server
Ncsa Httpd
Apr 16, 2026
Jan 1, 1997
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
2Apache
Netscape
4Commerce Server
Communications ServerEnterprise Server+1 more
Apr 16, 2026
Dec 10, 1996
N/A· v4
N/A· v3
7.5 HIGH· v2
List of arbitrary files on Web host via nph-test-cgi script.
1Apache
1Http Server
Apr 16, 2026
Apr 1, 1996
N/A· v4
N/A· v3
5.0 MEDIUM· v2
test-cgi program allows an attacker to list files on the server.
2Apache
Ncsa
2Http Server
Ncsa Httpd
Apr 16, 2026
Mar 20, 1996
N/A· v4
N/A· v3
10.0 HIGH· v2
phf CGI program allows remote command execution through shell metacharacters.