PT-2025-51039

Name of the Vulnerable Software and Affected Versions Airflow versions prior to 3.1.4 Airflow versions prior to 2.11.1 Description A flaw exists in Airflow where the user interface UI error reporting could expose sensitive information passed as keyword arguments kwargs to operators when a Directe...

The vulnerability of the mod_md module in the Apache HTTP Server allows a hacker to induce a service failure.

The vulnerability of the modmd module in the Apache HTTP Server is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Apache HTTP Server’s web server lies in its failure to take measures to neutralize specific control elements, allowing attackers to influence the confidentiality and integrity of the protected information.

The vulnerability of the Apache HTTP Server is related to the lack of measures taken to neutralize specific control elements. Exploiting this vulnerability allows a remote attacker to influence the confidentiality and integrity of the protected information...

PT-2025-50906

Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Users are encouraged to upgrade to version 1.13.0, the latest release...

Apache StreamPark 安全漏洞

Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from a weak algorithmic vulnerability that stems from the use of weak encryption algorithms, which can be exploited by an attacker to expose sensitive...

Apache Fineract 安全漏洞

Apache Fineract is a set of open source digital financial services platform from the U.S. Apache Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. Apache Fineract suffers from a security...

Apache StreamPark 安全漏洞

Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from a security bypass vulnerability due to the use of a fixed, immutable encryption key. An attacker could exploit the vulnerability to decrypt...

The vulnerability of the mod_userdir module in the Apache HTTP Server allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the moduserdir module in the Apache HTTP Server relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code...

PT-2025-50939

In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain...

PT-2025-50905

Name of the Vulnerable Software and Affected Versions Apache Fineract versions through 1.11.0 Description A flaw exists in Apache Fineract related to insufficiently protected credentials. Upgrade to version 1.13.0, the latest release, to address this issue. The issue is resolved in version 1.12.1...

Apache Fineract 安全漏洞

Apache Fineract is a set of open source digital financial services platform of the U.S. Apache Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. Apache Fineract suffers from an informatio...

Apache Fineract 安全漏洞

Apache Fineract is a set of open source digital financial services platform from the U.S. Apache Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. Apache Fineract suffers from an...

PT-2025-50904

Name of the Vulnerable Software and Affected Versions Apache Fineract versions through 1.10.1 Description Apache Fineract is affected by a weak password requirements issue. Upgrade to version 1.11.0 or later to address this. Users are encouraged to upgrade to version 1.13.0, the latest release...

The vulnerability of the mod_cgid module in the Apache HTTP Server allows a hacker to execute arbitrary code.

The vulnerability of the modcgid module in the Apache HTTP Server is related to the disclosure of information during data transmission. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

tika-core: tika-parsers: tika-parser-pdf-module: Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected

A XML External Entity XXE injection vulnerability was found in the Apache Tika framework's PDF parsing functionality. It could allow a remote, unauthenticated attacker to exploit the system by providing a specially crafted PDF containing an XFA XML Forms Architecture file. This flaw could lead to...

[SECURITY] Fedora 43 Update: httpd-2.4.66-1.fc43

The Apache HTTP Server is a powerful, efficient, and extensible web server...

Apache HTTP Server: mod_md (ACME), unintended retry intervals

...

Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

...

PT-2025-51035

CVE-2025-12731 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2025-12731 Published : Dec. 10, 2025, 11:15 p.m. | 2 hours, 3 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...

PT-2025-51124

CVE-2025-67692 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-67692 Published : Dec. 11, 2025, 4:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...