Apache - CVE CyberSecurity Database News (Page 28)

Feb 29, 2024 Exploit Apache

CVE-2024-23946 - Path Traversal Flaw in Apache OFBiz Leads to Arbitrary File Inclusion

--- Apache OFBiz is an open-source enterprise resource planning (ERP) and e-commerce software widely used by businesses to run backend operations. On January 29, 2024,

Feb 29, 2024 Apache

CVE-2024-23807 - Exploiting Use-After-Free in Apache Xerces C++ XML Parser – Full Details & Mitigation

Summary: A serious vulnerability, tracked as CVE-2024-23807, has been found in the Apache Xerces C++ XML parser (versions 3.. up to, but not including, 3.

Feb 29, 2024 Apache rack

CVE-2024-26141 - Dangerous Ruby Rack File Range Headers Can Crash Your Web Server

If you’re running a Ruby web application (especially with Rails), this vulnerability should catch your attention. Discovered in February 2024, CVE-2024-26141 exposes a nasty

Feb 28, 2024 SQL Apache Apache Software Foundation Apache Superset

CVE-2024-24773 - Bypassing Data Authorization in Apache Superset via Nested SQL Injection

Recently, a critical vulnerability — CVE-2024-24773 — was discovered in Apache Superset, a popular open-source data exploration and visualization platform. This flaw affects the handling of nested

Feb 28, 2024 Apache Apache Software Foundation Apache Superset

CVE-2024-26016 - How Low Privileged Users Could Hijack Dashboards in Apache Superset (Full Breakdown)

Apache Superset is a popular open-source platform for data exploration and dashboarding at scale. In February 2024, a security vulnerability was identified and assigned CVE-2024-26016.