66076 matches found
PT-2025-51039
Name of the Vulnerable Software and Affected Versions Airflow versions prior to 3.1.4 Airflow versions prior to 2.11.1 Description A flaw exists in Airflow where the user interface UI error reporting could expose sensitive information passed as keyword arguments kwargs to operators when a Directe...
PT-2025-51040
A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization. Users are recommended to upgrade to version 3.1.4, which fixes this...
The vulnerability of the Apache HTTP Server’s web server lies in its failure to take measures to neutralize specific control elements, allowing attackers to influence the confidentiality and integrity of the protected information.
The vulnerability of the Apache HTTP Server is related to the lack of measures taken to neutralize specific control elements. Exploiting this vulnerability allows a remote attacker to influence the confidentiality and integrity of the protected information...
The vulnerability of the mod_md module in the Apache HTTP Server allows a hacker to induce a service failure.
The vulnerability of the modmd module in the Apache HTTP Server is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Apache StreamPark 安全漏洞
Apache StreamPark is a streaming media application development framework from the Apache Foundation USA. A security vulnerability exists in Apache StreamPark versions prior to 2.1.7, which stems from the use of hard-coded encryption keys that could lead to information disclosure or unauthorized...
PT-2025-50906
Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Users are encouraged to upgrade to version 1.13.0, the latest release...
Apache StreamPark 安全漏洞
Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from a security bypass vulnerability due to the use of a fixed, immutable encryption key. An attacker could exploit the vulnerability to decrypt...
Apache Fineract 安全漏洞
Apache Fineract is a set of open source digital financial services platform from the U.S. Apache Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. Apache Fineract suffers from a security...
Apache StreamPark 安全漏洞
Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from a weak algorithmic vulnerability that stems from the use of weak encryption algorithms, which can be exploited by an attacker to expose sensitive...
PT-2025-50939
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain...
The vulnerability of the mod_userdir module in the Apache HTTP Server allows a hacker to escalate their privileges and execute arbitrary code.
The vulnerability of the moduserdir module in the Apache HTTP Server relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code...
Apache Fineract 安全漏洞
Apache Fineract is a set of open source digital financial services platform of the U.S. Apache Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. Apache Fineract suffers from an informatio...
PT-2025-50905
Name of the Vulnerable Software and Affected Versions Apache Fineract versions through 1.11.0 Description A flaw exists in Apache Fineract related to insufficiently protected credentials. Upgrade to version 1.13.0, the latest release, to address this issue. The issue is resolved in version 1.12.1...
PT-2025-50904
Name of the Vulnerable Software and Affected Versions Apache Fineract versions through 1.10.1 Description Apache Fineract is affected by a weak password requirements issue. Upgrade to version 1.11.0 or later to address this. Users are encouraged to upgrade to version 1.13.0, the latest release...
Apache Fineract 安全漏洞
Apache Fineract is a set of open source digital financial services platform from the U.S. Apache Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. Apache Fineract suffers from an...
The vulnerability of the mod_cgid module in the Apache HTTP Server allows a hacker to execute arbitrary code.
The vulnerability of the modcgid module in the Apache HTTP Server is related to the disclosure of information during data transmission. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
tika-core: tika-parsers: tika-parser-pdf-module: Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected
A XML External Entity XXE injection vulnerability was found in the Apache Tika framework's PDF parsing functionality. It could allow a remote, unauthenticated attacker to exploit the system by providing a specially crafted PDF containing an XFA XML Forms Architecture file. This flaw could lead to...
[SECURITY] Fedora 43 Update: httpd-2.4.66-1.fc43
The Apache HTTP Server is a powerful, efficient, and extensible web server...
