Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,715

All time

Critical · Active

12,045

CVSS ≥ 9.0

New · 14 days

2,415

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 301–330 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-42536	—	—	Apache HTTP Server: mod_xml2enc heap overflow	Jun 8, 2026 2mo ago
CVE-2026-44185	—	—	Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`	Jun 8, 2026 2mo ago
CVE-2026-34355	—	—	Apache HTTP Server: mod_proxy_html buffer overflow	Jun 8, 2026 2mo ago
CVE-2026-44631	—	—	Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow	Jun 8, 2026 2mo ago
CVE-2026-44119	—	—	Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules	Jun 8, 2026 2mo ago
CVE-2026-43951	—	—	Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash	Jun 8, 2026 2mo ago
CVE-2026-42535	—	—	Apache HTTP Server: mod_dav_fs protected directory access	Jun 8, 2026 2mo ago
CVE-2026-34356	—	—	Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow	Jun 8, 2026 2mo ago
CVE-2026-44186	—	—	Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp	Jun 8, 2026 2mo ago
CVE-2026-29170	—	—	Apache HTTP Server: mod_proxy_ftp XSS	Jun 8, 2026 2mo ago
CVE-2026-29167	—	—	Apache HTTP Server: mod_ldap per-dir use-after-free	Jun 8, 2026 2mo ago
CVE-2026-50076	—	—	Apache Fory: Java ReplaceResolverSerializer deserialization checks bypass	Jun 4, 2026 2mo ago
CVE-2026-47065	critical	9.8/10	Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232	Jun 3, 2026 2mo ago
CVE-2026-46718	—	—	Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution	Jun 2, 2026 2mo ago
CVE-2026-41115	—	—	Apache Kafka: Improper Authorization in CONSUMER_GROUP_DESCRIBE API	Jun 2, 2026 2mo ago
CVE-2026-49328	—	—	Apache Fesod (Incubating): Improper validation of user-supplied URLs leading to SSRF	Jun 1, 2026 2mo ago
CVE-2026-48827	high	7.1/10	Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git	Jun 1, 2026 2mo ago
CVE-2026-44825	high	8.1/10	Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users	Jun 1, 2026 2mo ago
CVE-2026-49361	—	—	Apache Fluss Netty Frame Decoder Memory Exhaustion Vulnerability	Jun 1, 2026 2mo ago
CVE-2026-40861	—	—	Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandler	Jun 1, 2026 2mo ago
CVE-2026-40961	—	—	Apache Airflow: Open Redirect Bypass Vulnerability	Jun 1, 2026 2mo ago
CVE-2026-40963	—	—	Apache Airflow: DAG authorization bypass on /ui/structure/structure_data	Jun 1, 2026 2mo ago
CVE-2026-41014	—	—	Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpoints	Jun 1, 2026 2mo ago
CVE-2026-49267	—	—	Apache Airflow: No certificate validation on SMTP STARTTLS connections	Jun 1, 2026 2mo ago
CVE-2026-41017	—	—	Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy	Jun 1, 2026 2mo ago
CVE-2026-41084	—	—	Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutation	Jun 1, 2026 2mo ago
CVE-2026-42252	—	—	Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user pattern	Jun 1, 2026 2mo ago
CVE-2026-42360	—	—	Apache Airflow: Rendered template truncation bypasses nested sensitive-key masking	Jun 1, 2026 2mo ago
CVE-2026-42358	—	—	Apache Airflow: Variable masker depth-limit bypass returns cleartext nested secrets	Jun 1, 2026 2mo ago
CVE-2026-42359	—	—	Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator	Jun 1, 2026 2mo ago