Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

702

Newly disclosed

Feed last synced

17 hrs ago

Data freshness

Showing 331–360 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-68493	—	—	Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component	Jan 11, 2026 5mo ago
CVE-2025-52435	—	—	Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller	Jan 10, 2026 5mo ago
CVE-2025-53470	—	—	Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver	Jan 10, 2026 5mo ago
CVE-2025-53477	—	—	Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer	Jan 10, 2026 5mo ago
CVE-2025-62235	—	—	Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing	Jan 10, 2026 5mo ago
CVE-2025-68637	—	—	Apache Uniffle: Insecure SSL Configuration in Uniffle HTTP Client	Jan 7, 2026 5mo ago
CVE-2025-68280	—	—	Apache SIS: XML External Entity (XXE) vulnerability	Jan 5, 2026 5mo ago
CVE-2025-66518	high	8.8/10	Apache Kyuubi: Unauthorized directory access due to missing path normalization	Jan 5, 2026 5mo ago
CVE-2025-47411	—	—	Apache StreamPipes: Leverage of User ID for Privilege Escalation	Jan 1, 2026 5mo ago
CVE-2025-48769	—	—	Apache NuttX RTOS: fs/vfs/fs_rename: use after free	Jan 1, 2026 5mo ago
CVE-2025-48768	—	—	Apache NuttX RTOS: fs/inode: fs_inoderemove root inode removal	Jan 1, 2026 5mo ago
CVE-2025-66524	high	7.5/10	Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor	Dec 19, 2025 6mo ago
CVE-2025-68161	medium	6.3/10	Apache Log4j Core: Missing TLS hostname verification in Socket appender	Dec 18, 2025 6mo ago
CVE-2025-66029	high	7.6/10	Open OnDemand affected by Apache proxy passing sensitive headers	Dec 17, 2025 6mo ago
CVE-2025-67895	—	—	Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2	Dec 17, 2025 6mo ago
CVE-2025-66388	—	—	Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI	Dec 15, 2025 6mo ago
CVE-2025-53960	—	—	Apache StreamPark: Uses the user’s password as the secret key	Dec 12, 2025 6mo ago
CVE-2025-54947	—	—	Apache StreamPark: Use hard-coded key vulnerability	Dec 12, 2025 6mo ago
CVE-2025-54981	—	—	Apache StreamPark: Weak Encryption Algorithm in StreamPark	Dec 12, 2025 6mo ago
CVE-2025-26866	—	—	Apache HugeGraph-Server: RAFT and deserialization vulnerability	Dec 12, 2025 6mo ago
CVE-2025-58137	—	—	Apache Fineract: IDOR via self-service API	Dec 12, 2025 6mo ago
CVE-2025-58130	—	—	Apache Fineract: Server Key not masked	Dec 12, 2025 6mo ago
CVE-2025-23408	high	8.5/10	Apache Fineract: weak password policy	Dec 12, 2025 6mo ago
CVE-2025-66675	—	—	Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) - version ranges fixed	Dec 10, 2025 6mo ago
CVE-2025-58098	—	—	Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...	Dec 5, 2025 6mo ago
CVE-2025-66200	—	—	Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo	Dec 5, 2025 6mo ago
CVE-2025-65082	—	—	Apache HTTP Server: CGI environment variable override	Dec 5, 2025 6mo ago
CVE-2025-59775	—	—	Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF	Dec 5, 2025 6mo ago
CVE-2025-55753	—	—	Apache HTTP Server: mod_md (ACME), unintended retry intervals	Dec 5, 2025 6mo ago
CVE-2025-66516	high	8.4/10	Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected	Dec 4, 2025 6mo ago