Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

702

Newly disclosed

Feed last synced

14 hrs ago

Data freshness

Showing 271–300 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-32794	—	—	Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange	Mar 30, 2026 2mo ago
CVE-2026-4649	medium	5.3/10	Auth bypass in Apache Artemis allows reading all internal messages	Mar 24, 2026 3mo ago
CVE-2026-32642	low	2.3/10	Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission	Mar 24, 2026 3mo ago
CVE-2026-28563	—	—	Apache Airflow: DAG authorization bypass	Mar 17, 2026 3mo ago
CVE-2026-26929	—	—	Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata	Mar 17, 2026 3mo ago
CVE-2026-30911	—	—	Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization	Mar 17, 2026 3mo ago
CVE-2026-28779	—	—	Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications	Mar 17, 2026 3mo ago
CVE-2025-54920	—	—	Apache Spark: Spark History Server Code Execution Vulnerability	Mar 14, 2026 3mo ago
CVE-2025-60012	—	—	Apache Livy: Restrict file access	Mar 13, 2026 3mo ago
CVE-2025-66249	—	—	Apache Livy: Unauthorized directory access	Mar 13, 2026 3mo ago
CVE-2026-3963	medium	6.3/10	perfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key	Mar 11, 2026 3mo ago
CVE-2026-23907	—	—	Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code	Mar 10, 2026 3mo ago
CVE-2026-25604	—	—	Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass	Mar 9, 2026 3mo ago
CVE-2025-69219	—	—	Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator	Mar 9, 2026 3mo ago
CVE-2026-24713	—	—	Apache IoTDB: JEXL Expression Injection Vulnerability	Mar 9, 2026 3mo ago
CVE-2026-24015	—	—	Apache IoTDB: Insecure Default Configuration Vulnerability	Mar 9, 2026 3mo ago
CVE-2026-24308	—	—	Apache ZooKeeper: Sensitive information disclosure in client configuration handling	Mar 7, 2026 3mo ago
CVE-2026-24281	—	—	Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager	Mar 7, 2026 3mo ago
CVE-2025-40931	—	—	Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id	Mar 5, 2026 3mo ago
CVE-2026-27446	critical	9.3/10	Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation	Mar 4, 2026 3mo ago
CVE-2025-66168	medium	5.4/10	Apache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validated	Mar 4, 2026 3mo ago
CVE-2025-59060	—	—	Apache Ranger: Hostname verification bypass in NiFiRegistryClient and NifiClient	Mar 3, 2026 3mo ago
CVE-2025-59059	—	—	Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator	Mar 3, 2026 3mo ago
CVE-2025-30044	critical	9.4/10	RCE on uhcapache user permissions	Mar 2, 2026 3mo ago
CVE-2025-40932	—	—	Apache::SessionX versions through 2.01 for Perl create insecure session id	Feb 26, 2026 4mo ago
CVE-2026-27636	high	8.8/10	FreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on Apache	Feb 25, 2026 4mo ago
CVE-2026-23969	medium	5.3/10	Apache Superset: Exposure of Sensitive Information via Incomplete ClickHouse Function Filtering	Feb 24, 2026 4mo ago
CVE-2026-23980	medium	5.3/10	Apache Superset: Improper Neutralization of Special Elements used in a SQL Command	Feb 24, 2026 4mo ago
CVE-2026-23982	high	7.1/10	Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass	Feb 24, 2026 4mo ago
CVE-2026-23983	low	2.3/10	Apache Superset: Sensitive Data Exposure via REST API (disabled by default)	Feb 24, 2026 4mo ago