Browse CVEs

HIGH 7.5 CVE-2026-49486 The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `prot_p()`, so although the control c… Apache Airflow Providers Ftp 3.15.1+ Fix from $1,9502026-06-26 HIGH 7.5 CVE-2026-31923 Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. This can occur due to `ssl_verify` in openid-connect plugin configur… Apisix 3.16.0+ Fix from $1,9502026-04-14 MEDIUM 5.3 CVE-2026-31924 Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-cloud-cls log export uses plaintext HTTP This issue affects … Apisix 3.16.0+ Fix from $1,6002026-04-14 HIGH 7.5 CVE-2021-33900 While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-… Directory Studio after 1.5.3 Fix from $1,9502021-07-26 HIGH 7.5 CVE-2019-12399 When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a conne… Kafka after 14.4.0 Fix from $1,9502020-01-14 HIGH 7.5 CVE-2019-0231 Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the cl… Mina Mitigation only Fix from $1,9502019-10-01 HIGH 7.5 CVE-2018-17195 The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle (MiTM) attack… Nifi after 1.7.1 Fix from $1,9502018-12-19 CRITICAL 9.8 CVE-2018-1297EPSS 10% When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access … Jmeter Mitigation only Fix from $2,3002018-02-13 HIGH 7.5 CVE-2017-5652 During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent data in plaintext even when … Impala Mitigation only Fix from $1,9502017-07-10