目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Apache Software Foundation 厂商漏洞列表 / CVE 中文分析 2751

Apache Software Foundation 厂商相关 2751 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Apache Software Foundation 致力于开发和维护广泛使用的开源软件，涵盖 Web 服务器、数据库及中间件等核心领域。其项目历史上常暴露远程代码执行、跨站脚本及权限绕过等高危漏洞，多源于配置不当或代码逻辑缺陷。尽管拥有严格的代码审查机制，但部分组件仍因复杂性面临持续安全挑战。近期统计显示已收录 1717 条 CVE，凸显其生态规模与安全防护的持续重要性。

找到 89 条结果 / 2751 清除筛选
Top products by Apache Software Foundation: Apache Airflow Apache HTTP Server Apache Tomcat Apache Traffic Server Apache Thrift Apache Camel Apache Superset Apache CXF Apache OFBiz Apache CloudStack Apache NiFi Apache DolphinScheduler Apache InLong Apache bRPC Apache Syncope Apache Kylin Apache Answer Apache APISIX Apache Struts Apache Pulsar Apache IoTDB Apache OpenOffice Apache Zeppelin Apache Roller Apache Solr Apache OpenMeetings Apache Ranger Apache JSPWiki Apache Wicket Apache Fineract
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-66054 Apache Thrift C++ THeaderTransport 未强制配置最大帧大小漏洞 — Apache Thrift CWE-770 6.9 Medium 2026-10-02
CVE-2026-61374 Apache Thrift Java TSaslTransport 认证后数据帧缺少大小限制漏洞 — Apache Thrift CWE-770 7.1 High 2026-10-02
CVE-2026-63772 Apache Thrift Go 服务未授权单包崩溃漏洞 — Apache Thrift CWE-770 8.7 High 2026-10-02
CVE-2026-66055 Apache Thrift TJSONProtocol 接受超出配置限制的JSON字符串/数字 — Apache Thrift CWE-770 8.2 High 2026-10-02
CVE-2026-66081 Apache Thrift c_glib 未版本化消息参数未设置漏洞 — Apache Thrift CWE-824 8.7 High 2026-10-02
CVE-2026-66331 Apache Thrift 缓冲区传输未计入 MaxMessageSize 漏洞 — Apache Thrift CWE-770 6.9 Medium 2026-10-02
CVE-2026-66837 Apache Thrift PHP加速器栈缓冲区溢出漏洞 — Apache Thrift CWE-121 8.7 High 2026-10-02
CVE-2026-66858 Apache Thrift 递归限制绕过漏洞 — Apache Thrift CWE-674 8.7 High 2026-10-02
CVE-2026-66859 Apache Thrift c_glib 多路复用处理器崩溃漏洞 — Apache Thrift CWE-476 8.7 High 2026-10-02
CVE-2026-83632 Apache Thrift C++ THttpTransport 缓冲区无限增长漏洞 — Apache Thrift CWE-770 9.2 Critical 2026-10-02
CVE-2026-83663 Apache Thrift Go版TFramedTransport/THeaderTransport漏洞 — Apache Thrift CWE-674 8.7 High 2026-10-02
CVE-2026-83745 Apache Thrift WebSocket帧解码缓冲区分配漏洞 — Apache Thrift CWE-789 8.7 High 2026-10-02
CVE-2026-85476 Apache Thrift c_glib read_all 无限循环漏洞 — Apache Thrift CWE-835 8.2 High 2026-10-02
CVE-2026-96289 Apache Thrift PHP结构体读取递归深度限制缺失漏洞 — Apache Thrift CWE-674 8.2 High 2026-10-02
CVE-2026-96287 Apache Thrift Perl FramedTransport二次缓冲区重切片漏洞 — Apache Thrift CWE-407 8.2 High 2026-10-02
CVE-2026-96286 Apache Thrift Perl服务在连接失败时结束serve — Apache Thrift CWE-248 8.2 High 2026-10-02
CVE-2026-96277 Apache Thrift Ruby SimpleServer 异常处理漏洞 — Apache Thrift CWE-248 8.7 High 2026-10-02
CVE-2026-94658 Apache Thrift Lua传输层缓冲区二次增长漏洞 — Apache Thrift CWE-407 8.7 High 2026-10-02
CVE-2026-94657 Apache Thrift javame TJsonProtocol字符串大小未限制漏洞 — Apache Thrift CWE-770 8.2 High 2026-10-02
CVE-2026-94656 Apache Thrift TJSONProtocol字符串长度无限制漏洞 — Apache Thrift CWE-770 8.2 High 2026-10-02
CVE-2026-94655 Apache Thrift Lua JSON协议字符串/数字读取无大小限制 — Apache Thrift CWE-770 8.2 High 2026-10-02
CVE-2026-94654 Apache Thrift Python TNonblockingServer 文件描述符选择阻塞漏洞 — Apache Thrift CWE-835 8.2 High 2026-10-02
CVE-2026-94653 Apache Thrift PHP 传输缓冲区二次缩放漏洞 — Apache Thrift CWE-407 8.2 High 2026-10-02
CVE-2026-94652 Apache Thrift C++ TEvhttpServer RequestContext泄露漏洞 — Apache Thrift CWE-401 6.3 Medium 2026-10-02
CVE-2026-94648 Apache Thrift Dart TJsonProtocol 无字符串大小限制漏洞 — Apache Thrift CWE-770 8.2 High 2026-10-02
CVE-2026-94646 Apache Thrift Node.js server.js 进程终止漏洞 — Apache Thrift CWE-248 8.7 High 2026-10-02
CVE-2026-94638 Apache Thrift PHP thrift_protocol 扩展忽略 maxStringSize 配置 — Apache Thrift CWE-770 6.3 Medium 2026-10-02
CVE-2026-94637 Apache Thrift Go 版本 ZLIB 帧膨胀大小未限制漏洞 — Apache Thrift CWE-409 8.2 High 2026-10-02
CVE-2026-94636 Apache Thrift Python TZlibTransport 资源耗尽漏洞 — Apache Thrift CWE-409 8.2 High 2026-10-02
CVE-2026-92834 Apache Thrift C++ WebSocket服务端传输漏洞 — Apache Thrift CWE-908 6.3 Medium 2026-10-02

本页汇总了 Apache Software Foundation 厂商截至目前公开的全部 2751 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。