Apache - CVE CyberSecurity Database News

Sep 4, 2024 Exploit Apache

CVE-2024-45195 - Direct Request ('Forced Browsing') Vulnerability in Apache OFBiz: Exploit Details and Mitigation

Apache OFBiz is a widely used, open-source enterprise automation software designed to help businesses create, launch, and maintain applications with ease. Recently, a significant vulnerability

Aug 20, 2024 Microsoft API Exploit Apache

CVE-2024-38175 - Critical Privilege Escalation Vulnerability in Azure Managed Instance for Apache Cassandra

Recently, a severe security vulnerability, CVE-2024-38175, has been reported in the Azure Managed Instance for Apache Cassandra. This cybersecurity threat constitutes an improper access control

Aug 12, 2024 Apache

CVE-2024-41909: Protecting Apache MINA SSHD from Terrapin Attack via CVE-2023-48795 Mitigation

The Apache MINA SSHD project has been an important part of the Apache ecosystem for some time, offering a quick, efficient, and extensible SSH library

Jul 19, 2024 Exploit Apache PHP

CVE-2024-29736 - SSRF Vulnerability in Apache CXF WADL Service Description: Exploit Details and Mitigation

A critical Server-Side Request Forgery (SSRF) vulnerability has been discovered in the Apache CXF Web Application Description Language (WADL) service description for REST web services.

Jul 18, 2024 Windows Apache

CVE-2024-40898: SSRF Vulnerability Discovered in Apache HTTP Server on Windows with mod_rewrite – How to Stay Protected

In this post, we will delve into the details of a recent security vulnerability, the CVE-2024-40898, found in the Apache HTTP Server (on Windows) software.