· Vulnerability feed · live
CVE feed
Aggregated from NVD and the CISA Known Exploited Vulnerabilities catalog, updated every 30 minutes. Scores use CVSS v3.1 where published.
9.8Apache MINA — unsafe deserialization.10.0Apache Traffic Server — incorrect authorization.EPSS 0.4%10.0Apache Traffic Server — improper certificate validation.EPSS 0.2%10.0Apache Traffic Server — improper certificate validation.EPSS 0.2%9.3Apache Apache Traffic Server — Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or…EPSS 0.2%9.0Apache Traffic Server — missing authentication.EPSS 0.4%9.3Apache Apache Traffic Server — Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse…EPSS 0.3%10.0Apache Apache Traffic Server — Apache Traffic Server's experimental magick plugin lets an unauthenticated client control…EPSS 0.5%10.0Apache Pulsar Manager — missing authentication.EPSS 0.7%9.2Apache Pulsar — improper signature verification.EPSS 0.3%9.1Apache bRPC — authentication bypass.EPSS 0.6%9.1Apache bRPC — missing authentication.EPSS 0.7%9.8Apache IoTDB — missing authentication.EPSS 0.6%9.1Apache bRPC — out-of-bounds write.EPSS 1.0%9.1Apache bRPC — authentication bypass.EPSS 0.6%9.8Apache IoTDB — authentication bypass.EPSS 0.6%9.3Apache CouchDB — command injection.EPSS 0.6%9.1Apache Apache Tomcat — Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could…EPSS 0.6%9.1Apache Tomcat — race condition.EPSS 0.5%9.1Apache Apache Tomcat — A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was…EPSS 0.6%10.0Apache Camel — remote code execution.EPSS 0.9%9.8Apache Apache Johnzon — Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability…EPSS 0.4%9.8Apache Answer — missing authentication.EPSS 0.5%9.8Apache Kylin — unsafe deserialization.EPSS 0.5%9.8Apache Kylin — authentication bypass.EPSS 0.5%