Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Fineract
CRITICAL 9.1
Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in ver…
Solr
HIGH 7.5
Insufficiently Protected Credentials vulnerability in Apache Solr. This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.3.…
Kylin
HIGH 7.5
In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.properties', that may contain…
Superset
MEDIUM 6.5
An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue…
Superset
MEDIUM 6.5
Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could b…
Shenyu
HIGH 7.5
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to versio…
Superset
MEDIUM 6.5
Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed …
Solr
HIGH 7.5
When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing…
Fineract
HIGH 7.5
The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract ji…
Artemis
MEDIUM 5.5
A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in t…
Cxf
HIGH 7.5
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to ver…