Aurora (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 41 known versions, newest CVE from 2024-02-27. Vendor: Apache.

CVEs of Aurora

• CVE-2024-27905 - CVSS 9.1 (critical), 2024-02-27: ** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to…
• CVE-2016-4437 - CVSS 9.8 (critical), 2016-06-07: Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or…