You are viewing a plain text version of this content. The canonical link for it is here.
- CVE-2024-23590: Apache Kylin: Session fixation in web interface - posted by Li Yang <li...@apache.org> on 2024/11/03 05:46:43 UTC, 0 replies.
- [ANNOUNCE] Apache SDAP 1.4.0 Released - posted by Riley Kuttruff <rk...@apache.org> on 2024/11/04 17:08:33 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 2.0.0 Released - posted by David Handermann <ex...@apache.org> on 2024/11/04 19:28:21 UTC, 0 replies.
- [ANNOUNCE] MyFaces Core v4.1.0-RC3 Release - posted by Volodymyr Siedlecki <vo...@apache.org> on 2024/11/04 21:42:06 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on November 03, 2024 are released - posted by Elad Kalif <el...@apache.org> on 2024/11/05 08:01:18 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow 18.0.0 released - posted by Raúl Cumplido <ra...@apache.org> on 2024/11/05 12:09:53 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.10.3 Released - posted by Utkarsh Sharma <ut...@apache.org> on 2024/11/05 14:02:29 UTC, 0 replies.
- [ANNOUNCE] Apache XMLBeans 5.2.2 release - posted by PJ Fanning <fa...@apache.org> on 2024/11/05 14:22:06 UTC, 0 replies.
- CVE-2024-51504: Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server - posted by Andor Molnar <an...@apache.org> on 2024/11/06 15:30:09 UTC, 0 replies.
- [ANNOUNCE] Apache log4net 3.0.3 released - posted by Jan Friedrich <fr...@apache.org> on 2024/11/07 21:49:17 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 3.9.0 - posted by Colin McCabe <cm...@apache.org> on 2024/11/07 23:11:51 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 5.0.0-alpha-11 released - posted by Paul King <pa...@apache.org> on 2024/11/08 04:26:31 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 4.0.24 Released - posted by Paul King <pa...@apache.org> on 2024/11/08 04:27:55 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 3.0.23 Released - posted by Paul King <pa...@apache.org> on 2024/11/08 05:17:24 UTC, 0 replies.
- CVE-2024-50378: Apache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cli - posted by Ephraim Anierobi <ep...@apache.org> on 2024/11/08 14:19:33 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.97 available - posted by Rémy Maucherat <re...@apache.org> on 2024/11/09 14:07:24 UTC, 0 replies.
- [ANNOUNCE] Release Apache Fury(incubating) 0.9.0 - posted by Shawn Yang <ch...@apache.org> on 2024/11/10 15:36:27 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.1 Available - posted by Mark Thomas <ma...@apache.org> on 2024/11/10 22:15:31 UTC, 0 replies.
- [ANNOUNCE] Apache TsFile 1.1.0 released - posted by Haonan Hou <ha...@apache.org> on 2024/11/11 01:53:10 UTC, 0 replies.
- [ANNOUNCE] Apache OpenNLP 2.5.0 released - posted by Martin Wiesner <ma...@apache.org> on 2024/11/11 13:07:46 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.33 Available - posted by Christopher Schultz <sc...@apache.org> on 2024/11/11 15:19:08 UTC, 0 replies.
- [ANNOUNCE] Apache Log4j `3.0.0-beta3` released - posted by "Piotr P. Karwasz" <pk...@apache.org> on 2024/11/12 08:30:12 UTC, 0 replies.
- CVE-2024-50386: Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure - posted by Daniel Augusto Veronezi Salvador <gu...@apache.org> on 2024/11/12 13:37:16 UTC, 0 replies.
- [ANN] Apache ActiveMQ Classic 6.1.4 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2024/11/12 18:08:14 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow ADBC 15 Released - posted by David Li <li...@apache.org> on 2024/11/13 02:42:06 UTC, 0 replies.
- [ANNOUNCE] Apache Ratis 3.1.2 Release - posted by Xinyu Tan <ta...@apache.org> on 2024/11/13 10:49:30 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko gRPC 1.1.1 released - posted by PJ Fanning <fa...@apache.org> on 2024/11/13 15:17:45 UTC, 0 replies.
- [ANNOUNCE] Apache Traffic Server 10.0.2 and 9.2.6 are released - posted by Chris McFarlen <cm...@apache.org> on 2024/11/13 16:58:08 UTC, 0 replies.
- [ANNOUNCE] Released Reactive client for Apache Pulsar, version 0.5.9 - posted by Chris Bono <on...@apache.org> on 2024/11/15 00:21:15 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.72.0 released - posted by Julian Reschke <re...@apache.org> on 2024/11/15 05:10:58 UTC, 0 replies.
- CVE-2024-45784: Apache Airflow: Sensitive configuration values are not masked in the logs by default - posted by Ephraim Anierobi <ep...@apache.org> on 2024/11/15 06:54:39 UTC, 0 replies.
- CVE-2024-48962: Apache OFBiz: Bypass SameSite restrictions with target redirection using URL parameters (SSTI and CSRF leading to RCE) - posted by Jacques Le Roux <jl...@apache.org> on 2024/11/16 07:54:48 UTC, 0 replies.
- CVE-2024-47208: Apache OFBiz: URLs allowing remote use of Groovy expressions, leading to RCE - posted by Jacques Le Roux <jl...@apache.org> on 2024/11/16 07:54:58 UTC, 0 replies.
- CVE-2024-45505: Apache HertzBeat (incubating): Exists Native Deser RCE and file writing vulnerabilities - posted by Chao Gong <go...@apache.org> on 2024/11/16 09:42:49 UTC, 0 replies.
- CVE-2024-45791: Apache HertzBeat: Exposure sensitive token via http GET method with query string - posted by Chao Gong <go...@apache.org> on 2024/11/16 09:54:29 UTC, 0 replies.
- CVE-2024-41151: Apache HertzBeat: RCE by notice template injection vulnerability - posted by Chao Gong <go...@apache.org> on 2024/11/16 10:04:49 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on November 14, 2024 are released - posted by Elad Kalif <el...@apache.org> on 2024/11/18 09:05:56 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 3.5.0 released - posted by David Jensen <dj...@apache.org> on 2024/11/18 10:07:08 UTC, 0 replies.
- [SECURITY] CVE-2024-52316 Apache Tomcat - Authentication Bypass - posted by Mark Thomas <ma...@apache.org> on 2024/11/18 11:17:58 UTC, 0 replies.
- [SECURITY] CVE-2024-52317 Apache Tomcat - Request and/or response mix-up - posted by Mark Thomas <ma...@apache.org> on 2024/11/18 11:20:42 UTC, 0 replies.
- [SECURITY] CVE-2024-52318 Apache Tomcat - XSS in generated JSPs - posted by Mark Thomas <ma...@apache.org> on 2024/11/18 12:18:15 UTC, 0 replies.
- CVE-2024-31141: Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider - posted by Greg Harris <gh...@apache.org> on 2024/11/18 18:39:08 UTC, 0 replies.
- [ANNOUNCE] Apache Commons IO 2.18.0 - posted by Gary Gregory <gg...@apache.org> on 2024/11/19 22:26:13 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 1.3.3 released - posted by Haonan Hou <ha...@apache.org> on 2024/11/20 08:20:27 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 1.28.1 Released - posted by Ferenc Kis <br...@apache.org> on 2024/11/20 14:01:08 UTC, 0 replies.
- CVE-2024-52067: Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log - posted by David Handermann <ex...@apache.org> on 2024/11/20 17:20:33 UTC, 0 replies.
- [ANNOUNCE] Apache Log4j `2.24.2` released - posted by "Piotr P. Karwasz" <pk...@apache.org> on 2024/11/21 22:53:08 UTC, 0 replies.
- CVE-2024-45719: Apache Answer: Predictable Authorization Token Using UUIDv1 - posted by Enxin Xie <li...@apache.org> on 2024/11/22 13:55:18 UTC, 0 replies.
- [ANNOUNCE] Apache OpenNLP Pre-Trained Models 1.2 released - posted by Martin Wiesner <ma...@apache.org> on 2024/11/23 12:41:52 UTC, 0 replies.
- [ANNOUNCE] Apache Mynewt 1.13.0 and Apache Mynewt NimBLE 1.8.0 released - posted by Szymon Janc <ja...@apache.org> on 2024/11/25 10:52:07 UTC, 0 replies.
- [ANNOUNCE] Apache ServiceComb Java Chassis 3.2.3 Released - posted by liubao <li...@apache.org> on 2024/11/26 03:56:40 UTC, 0 replies.
- CVE-2024-47248: Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack - posted by Szymon Janc <ja...@apache.org> on 2024/11/26 08:16:55 UTC, 0 replies.
- CVE-2024-47249: Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler - posted by Szymon Janc <ja...@apache.org> on 2024/11/26 08:17:07 UTC, 0 replies.
- CVE-2024-47250: Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access - posted by Szymon Janc <ja...@apache.org> on 2024/11/26 08:17:18 UTC, 0 replies.
- CVE-2024-51569: Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler - posted by Szymon Janc <ja...@apache.org> on 2024/11/26 08:17:26 UTC, 0 replies.
- [ANNOUNCE] Apache Celeborn 0.5.2 available - posted by Nicholas Jiang <ni...@apache.org> on 2024/11/26 09:42:05 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid Proton 0.40.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2024/11/26 16:09:10 UTC, 0 replies.
- [ANNOUNCE] Apache flink-connector-kafka 3.4.0 released - posted by Arvid Heise <ar...@apache.org> on 2024/11/26 20:58:04 UTC, 0 replies.
- [ANNOUNCE] Apache UIMA Java SDK version 3.6.0 released - posted by Richard Eckart de Castilho <re...@apache.org> on 2024/11/27 11:23:31 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on November 24, 2024 are released - posted by Elad Kalif <el...@apache.org> on 2024/11/27 13:20:00 UTC, 0 replies.
- [ANNOUNCE] Apache Geronimo Jwt Auth 1.0.5 released - posted by Francois Papon <fp...@apache.org> on 2024/11/27 16:45:41 UTC, 0 replies.
- CVE-2024-52338: Apache Arrow R package: Arbitrary code execution when loading a malicious data file - posted by Dewey Dunnington <pa...@apache.org> on 2024/11/28 16:20:39 UTC, 0 replies.
- [ANN] Apache Struts 6.7.0 - posted by Lukasz Lenart <lu...@apache.org> on 2024/11/29 08:13:39 UTC, 0 replies.
- [ANNOUNCE] Apache Storm 2.7.1 released - posted by Rui Abreu <ra...@apache.org> on 2024/11/29 15:59:10 UTC, 0 replies.