Apache - CVE CyberSecurity Database News (Page 16)

Sep 12, 2023 Exploit Apache Apache Software Foundation Apache Airflow

CVE-2023-40611: Unraveling Apache Airflow's DAG Detail Value Modification Vulnerability with a Simple Fix

Apache Airflow, an open-source workflow management platform primarily known for its flexibility in working with complex data pipelines, is affected by a vulnerability that could

Sep 8, 2023 Exploit Apache TripodWorks CO.,LTD. GIGAPOD OFFICEHARD Appliance model

CVE-2014-5329: GIGAPOD File Servers - A deep dive into the Apache HTTP Server vulnerability and its implications on system security

Introduction: GIGAPOD file servers have been widely used across various organizations to efficiently manage their data storage needs. These servers come in two flavors – Appliance

Sep 6, 2023 CSRF Exploit Apache Jenkins Project Jenkins Azure AD Plugin

CVE-2023-41935 - Jenkins Azure AD Plugin Vulnerability: Non-Constant Time Comparison Function for CSRF Protection Nonce

Jenkins, the popular open-source automation server, has a vulnerability in Azure AD Plugin version 396.v86ce29279947 and earlier (excluding 378.380.v545b_1154b_3fb_). The

Sep 6, 2023 API Exploit Apache Apache Software Foundation Apache Superset

CVE-2023-36387 - An In-Depth Analysis of an Improper Default REST API Permission for Gamma Users in Apache Superset (Up to and Including 2.1.) That Allows Testing Database Connections

Abstract: Apache Superset is a popular open-source data exploration and visualization platform. Improper default REST API permissions for Gamma users can lead to a significant

Sep 6, 2023 API Exploit Apache Apache Software Foundation Apache Superset

CVE-2023-39264: Apache Superset Information Disclosure Vulnerability through Enabled Stack Traces

A recently discovered security vulnerability, identified as CVE-2023-39264, has been found to affect Apache Superset, the popular open-source Business Intelligence and Data Visualization web application.