Vendor/product archive

apache / aurora CVEs

Beta · best-effort

2 CVEs tagged to apache / aurora — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2024-27905

Published Feb 27, 2024

** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to unauthenticated users…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2016-4437

Published Jun 7, 2016

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access res…

CVSS 9.8 · Critical

Buzz score: 25.0

KEV listed

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1