Apache

Apache Pinot Improper Neutralization of Special Elements Authentication Bypass Vulnerability (CVE-2024-56325)

March 7, 2025 Kerry Dean 283 Views 0 Comments Apache, Apache Pinot, Authentication Bypass Vulnerability, CVE-2024-56325, Cyber Security 0 min read

CVE-2024-56325 vulnerability allows remote attackers to bypass authentication on affected installations of Apache Pinot.

News Security Vulnerabilities

Apache Arrow R package – Arbitrary code execution when loading a malicious data file [CVE-2024-52338]

November 29, 2024 Jason Davies 288 Views 0 Comments Apache, Apache Arrow R, Arbitrary Code Execution Vulnerability, CVE-2024-52338, Cyber Security 1 min read

CVE number = CVE-2024-52338 Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0

Security Vulnerabilities News

Apache OFBiz resolveURI Authentication Bypass Vulnerability [CVE-2024-38856]

August 7, 2024 Jason Davies 739 Views 0 Comments Apache, CVE-2024-38856 0 min read

CVE number = CVE-2024-38856 CVSS score = 9.8 This vulnerability allows remote attackers to bypass authentication on affected installations of

Security Vulnerabilities News

Apache OFBiz createRegister Error Message Information Disclosure Vulnerability [CVE-2024-23946]

February 22, 2024 Jason Davies 1337 Views 0 Comments Apache, Apache OFBiz, CVE-2024-23946, Cyber Security 0 min read

CVE number = CVE-2024-23946 This vulnerability in Apache OFBiz allows remote attackers to disclose sensitive information on affected installations of

Security Vulnerabilities News

Remote code execution vulnerability found in Apache Struts 2 [CVE-2023-50164]

December 12, 2023 Kerry Dean 1931 Views 0 Comments Apache, Apache Struts, Apache Struts 2, CVE-2023-50164, Remote Code Execution Vulnerability 1 min read

Apache has issued a warning to its users regarding a critical remote code execution (RCE) vulnerability found in its widely-used

Security Vulnerabilities News

Apache Batik DefaultScriptSecurity Server-Side Request Forgery Remote Code Execution Vulnerability [CVE-2022-40146]

October 7, 2022 Jason Davies 1952 Views 0 Comments Apache, Apache Batik, CVE-2022-40146, Cyber Security, Remote Code Execution Vulnerability, Server-Side Request Forgery 0 min read

CVE number – CVE-2022-40146 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache Batik. Interaction

Security Vulnerabilities News

Apache Batik DefaultExternalResourceSecurity Server-Side Request Forgery Information Disclosure Vulnerability [CVE-2022-38398]

October 7, 2022 Duncan 1916 Views 0 Comments Apache, Apache Batik, CVE-2022-38398, Cyber Security, Server-Side Request Forgery 0 min read

CVE number = CVE-2022-38398 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apache Batik. Interaction