目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Apache Software Foundation 厂商漏洞列表 / CVE 中文分析 2751

Apache Software Foundation 厂商相关 2751 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Apache Software Foundation 致力于开发和维护广泛使用的开源软件，涵盖 Web 服务器、数据库及中间件等核心领域。其项目历史上常暴露远程代码执行、跨站脚本及权限绕过等高危漏洞，多源于配置不当或代码逻辑缺陷。尽管拥有严格的代码审查机制，但部分组件仍因复杂性面临持续安全挑战。近期统计显示已收录 1717 条 CVE，凸显其生态规模与安全防护的持续重要性。

Top products by Apache Software Foundation: Apache Airflow Apache HTTP Server Apache Tomcat Apache Traffic Server Apache Thrift Apache Camel Apache Superset Apache CXF Apache OFBiz Apache CloudStack Apache NiFi Apache DolphinScheduler Apache InLong Apache bRPC Apache Syncope Apache Kylin Apache Answer Apache APISIX Apache Struts Apache Pulsar Apache IoTDB Apache OpenOffice Apache Zeppelin Apache Roller Apache Solr Apache OpenMeetings Apache Ranger Apache JSPWiki Apache Wicket Apache Fineract
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-85483 Apache Thrift c_glib TZlibTransport流结束前报告完整读取漏洞 — Apache Thrift CWE-908 6.3 Medium 2026-10-02
CVE-2026-85493 Apache Thrift 深层嵌套跳过漏洞 — Apache Thrift CWE-674 8.7 High 2026-10-02
CVE-2026-85494 Apache Thrift 无界缓冲区读取漏洞 — Apache Thrift CWE-130 8.7 High 2026-10-02
CVE-2026-91135 Apache Thrift C++ THeaderTransport 堆缓冲区溢出漏洞 — Apache Thrift CWE-122 9.2 Critical 2026-10-02
CVE-2026-91137 Apache Thrift PHP `thrift_protocol`加速器零字节容器元素漏洞 — Apache Thrift CWE-1284 8.7 High 2026-10-02
CVE-2026-93925 Apache Thrift C++ writeVarint32 栈缓冲区溢出漏洞 — Apache Thrift CWE-121 8.7 High 2026-10-02
CVE-2026-93926 Apache Thrift C++ THeaderTransport::untransform() 错误路径泄露zlib流漏洞 — Apache Thrift CWE-401 8.7 High 2026-10-02
CVE-2026-94633 Apache Thrift Dart `TBinaryProtocol` 内存分配漏洞 — Apache Thrift CWE-789 8.7 High 2026-10-02
CVE-2026-94634 Apache Thrift Python TJSONProtocol 字符串长度限制默认关闭 — Apache Thrift CWE-770 8.2 High 2026-10-02
CVE-2026-103885 Apache Directory LDAP API 电话号码值拒绝服务漏洞 — Apache Directory LDAP API - - 2026-10-02
CVE-2026-103877 Apache Directory LDAP API LDAP架构元素导致Java代码不安全加载漏洞 — Apache Directory LDAP API CWE-502 - - 2026-10-02
CVE-2026-103880 Apache Directory LDAP API bcrypt密码过度消耗拒绝服务漏洞 — Apache Directory LDAP API CWE-405 - - 2026-10-02
CVE-2026-103878 Apache Directory LDAP API StartTLS期间明文响应注入漏洞 — Apache Directory LDAP API CWE-345 - - 2026-10-02
CVE-2026-103552 Apache Directory LDAP API 服务端解码器栈溢出漏洞 — Apache Directory LDAP API CWE-121 - - 2026-10-02
CVE-2026-94639 Apache Thrift TSaslNonblockingServer 漏洞残留（线程死亡黑洞+无跨连接预算） — Apache Thrift CWE-755 8.2 High 2026-10-02
CVE-2026-102731 Apache Directory LDAP API 拒绝服务漏洞 — Apache Directory LDAP API CWE-789 - - 2026-10-02
CVE-2026-94635 Apache Thrift Lua readMessageBegin 绕过字符串大小检查漏洞 — Apache Thrift CWE-770 8.7 High 2026-10-02
CVE-2026-63686 Apache HTTP Server mod_xml2enc 崩溃漏洞 — Apache HTTP Server CWE-476 - - 2026-10-01
CVE-2026-93546 Apache HTTP Server mod_dav_fs 命名空间溢出漏洞 — Apache HTTP Server CWE-190 - - 2026-10-01
CVE-2026-79768 Apache HTTP Server mod_userdir 信息泄露漏洞 — Apache HTTP Server CWE-55 - - 2026-10-01
CVE-2026-73637 Apache HTTP Server mod_auth_digest拒绝服务漏洞 — Apache HTTP Server CWE-416 - - 2026-10-01
CVE-2026-73636 Apache HTTP Server mod_auth_digest 重放攻击漏洞 — Apache HTTP Server CWE-294 - - 2026-10-01
CVE-2026-63718 Apache HTTP Server mod_proxy_uwsgi 响应走私漏洞 — Apache HTTP Server CWE-444 - - 2026-10-01
CVE-2026-63292 Apache HTTP Server mod_vhost_alias 栈溢出漏洞 — Apache HTTP Server CWE-121 - - 2026-10-01
CVE-2026-63045 Apache HTTP Server mod_proxy_ftp 地址处理漏洞 — Apache HTTP Server CWE-284 - - 2026-10-01
CVE-2026-59797 Apache HTTP Server mod_ssl 远程代码执行漏洞 — Apache HTTP Server CWE-269 - - 2026-10-01
CVE-2026-59685 Apache HTTP Server 越界写入漏洞 — Apache HTTP Server CWE-787 - - 2026-10-01
CVE-2026-58415 Apache HTTP Server mod_dav_fs 属性数据库越权读取漏洞 — Apache HTTP Server CWE-552 - - 2026-10-01
CVE-2026-57941 Apache HTTP Server mod_http2 释放后使用漏洞 — Apache HTTP Server CWE-416 - - 2026-10-01
CVE-2026-56449 Apache HTTP Server mod_proxy_html 崩溃漏洞 — Apache HTTP Server CWE-787 - - 2026-10-01

本页汇总了 Apache Software Foundation 厂商截至目前公开的全部 2751 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。