Apache - CVE CyberSecurity Database News (Page 37)

Oct 23, 2023 Apache Apache Software Foundation Apache HTTP Server

CVE-2023-31122 - Out-of-bounds Read in mod_macro of Apache HTTP Server (through 2.4.57)

At the heart of the internet, Apache HTTP Server is one of the world’s most popular web servers. Millions of websites and applications rely

Oct 20, 2023 API SOAP Java Apache Apache Software Foundation Apache Santuario

CVE-2023-44483 - Info Leak in Apache Santuario - XML Security for Java (Private Key Disclosure)

A critical vulnerability has surfaced in Apache Santuario - XML Security for Java, tracked as CVE-2023-44483. All versions before 2.2.6, 2.3.4,

Oct 16, 2023 WordPress API Oracle Apache

CVE-2023-5561 - Exposing WordPress User Emails Through REST API – How This Oracle-Style Attack Unfolds

WordPress powers a huge part of the internet—but even the biggest platforms slip up sometimes. One major example is CVE-2023-5561, a vulnerability discovered in

Oct 14, 2023 API Exploit Apache Apache Software Foundation Apache Airflow

CVE-2023-42792 - How Apache Airflow Users Could Escalate Privileges and Manipulate DAGs

Apache Airflow is a powerful open-source platform for orchestrating complex workflows and data pipelines. But with great power comes the responsibility to keep your pipelines

Oct 14, 2023 API Apache Apache Software Foundation Apache Airflow

CVE-2023-45348 - How Authenticated Attackers Can Leak Apache Airflow Config With “expose_config” Mistake

Apache Airflow is a hugely popular open-source platform for orchestrating complex workflows. But even the best tools sometimes have security issues. In this article, I’