Apache

Nutch

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-41871

  • EPSS 0.78%
  • Veröffentlicht 09.09.2026 10:45:47
  • Zuletzt bearbeitet 10.09.2026 20:38:51

Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API). This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to ...

9.1

CVE-2026-41869

  • EPSS 0.77%
  • Veröffentlicht 09.09.2026 10:44:30
  • Zuletzt bearbeitet 10.09.2026 20:39:59

Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API). This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which remo...

8.8

CVE-2026-41870

  • EPSS 0.54%
  • Veröffentlicht 09.09.2026 10:43:04
  • Zuletzt bearbeitet 11.09.2026 13:06:07

Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch...

9.1

CVE-2021-23901

  • EPSS 4.36%
  • Veröffentlicht 25.01.2021 10:16:33
  • Zuletzt bearbeitet 21.11.2024 05:52:01

An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to int...

9.8

CVE-2016-6809

  • EPSS 8.03%
  • Veröffentlicht 06.04.2017 21:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.