Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-65583 |
|
Vulnerability in apache (CVE-2026-65583)
vulnerability in apache (CVE-2026-65583). Confidential information can be exposed externally.
|
| CVE-2026-68079 |
|
Vulnerability in apache (CVE-2026-68079)
vulnerability in apache (CVE-2026-68079). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61466 |
|
Vulnerability in apache (CVE-2026-61466)
vulnerability in apache (CVE-2026-61466). Confidential information can be exposed externally. Exploitable via ``scope``.
|
| CVE-2026-68481 |
|
Vulnerability in apache (CVE-2026-68481)
vulnerability in apache (CVE-2026-68481). Confidential information can be exposed externally.
|
| CVE-2026-63687 |
|
Vulnerability in apache (CVE-2026-63687)
vulnerability in apache (CVE-2026-63687). Confidential information can be exposed externally.
|
| CVE-2026-57818 |
|
Vulnerability in apache (CVE-2026-57818)
vulnerability in apache (CVE-2026-57818). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66909 |
|
Unsafe Deserialization in apache (CVE-2026-66909)
vulnerability in apache (CVE-2026-66909). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65432 |
|
XXE (XML External Entity) in apache (CVE-2026-65432)
vulnerability in apache (CVE-2026-65432). Confidential information can be exposed externally.
|
| CVE-2026-64958 |
|
Vulnerability in apache (CVE-2026-64958)
vulnerability in apache (CVE-2026-64958). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57819 |
|
Vulnerability in apache (CVE-2026-57819)
vulnerability in apache (CVE-2026-57819). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57817 |
|
Vulnerability in apache (CVE-2026-57817)
vulnerability in apache (CVE-2026-57817). Successful exploitation can lead to full system takeover. Exploitable via ``c_hash``.
|
| CVE-2026-54225 |
|
Vulnerability in apache (CVE-2026-54225)
vulnerability in apache (CVE-2026-54225). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50631 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50631)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50631). Confidential information can be exposed externally. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50632 |
|
Vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-50632)
vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-50632). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50633 |
|
Vulnerability in org.apache.cxf:cxf-integration-jca (CVE-2026-50633)
vulnerability in org.apache.cxf:cxf-integration-jca (CVE-2026-50633). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50634 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (CVE-2026-50634)
vulnerability in org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (CVE-2026-50634). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50645 |
|
Vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645)
vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.12` or later.
|
| CVE-2026-50627 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50627)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50627). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50628 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50628)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50628). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50629 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50629)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50629). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50630 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50630)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50630). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50623 |
|
Authentication Bypass in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50623)
authentication bypass in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50623). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-49875 |
|
XXE (XML External Entity) in apache (CVE-2026-49875)
vulnerability in apache (CVE-2026-49875). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44930 |
|
Vulnerability in org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap (CVE-2026-44930)
vulnerability in org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap (CVE-2026-44930). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.6.11` or later.
|
| CVE-2026-44417 |
|
Vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-44417)
vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-44417). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.6.11` or later.
|
| CVE-2026-44618 |
|
XXE (XML External Entity) in org.apache.cxf:cxf-rt-ws-transfer (CVE-2026-44618)
vulnerability in org.apache.cxf:cxf-rt-ws-transfer (CVE-2026-44618). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.11` or later.
|
| CVE-2021-40690 |
|
Information Disclosure in apache (CVE-2021-40690)
vulnerability in apache (CVE-2021-40690). Confidential information can be exposed externally.
|
| CVE-2017-12624 |
|
Vulnerability in apache (CVE-2017-12624)
vulnerability in apache (CVE-2017-12624). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3156 |
|
Vulnerability in apache (CVE-2017-3156)
vulnerability in apache (CVE-2017-3156). Confidential information can be exposed externally.
|
| CVE-2016-8739 |
|
XXE (XML External Entity) in apache (CVE-2016-8739)
vulnerability in apache (CVE-2016-8739). Confidential information can be exposed externally.
|
| CVE-2016-6812 |
|
Cross-Site Scripting (XSS) in apache (CVE-2016-6812)
cross-site scripting in apache (CVE-2016-6812). Risk of unauthorized operations or information disclosure.
|
| CVE-2012-0803 |
|
Authentication Bypass in apache (CVE-2012-0803)
authentication bypass in apache (CVE-2012-0803). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5656 |
|
Vulnerability in apache (CVE-2017-5656)
vulnerability in apache (CVE-2017-5656). Confidential information can be exposed externally.
|
| CVE-2017-5653 |
|
Vulnerability in apache (CVE-2017-5653)
vulnerability in apache (CVE-2017-5653). Risk of unauthorized operations or information disclosure.
|