Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

701

Newly disclosed

Feed last synced

18 hrs ago

Data freshness

Showing 361–390 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-64775	—	—	Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS)	Dec 1, 2025 6mo ago
CVE-2025-59789	—	—	Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser	Dec 1, 2025 6mo ago
CVE-2025-59792	—	—	Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins	Nov 28, 2025 7mo ago
CVE-2025-59790	—	—	Apache Kvrocks: RESET command grants admin privileges	Nov 28, 2025 7mo ago
CVE-2025-54057	—	—	Apache SkyWalking: Stored XSS vulnerability	Nov 27, 2025 7mo ago
CVE-2025-59302	—	—	Apache CloudStack: Potential remote code execution on Javascript engine defined rules	Nov 27, 2025 7mo ago
CVE-2025-59454	—	—	Apache CloudStack: Lack of user permission validation leading to data leak for few APIs	Nov 27, 2025 7mo ago
CVE-2025-59390	—	—	Apache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.	Nov 26, 2025 7mo ago
CVE-2025-62728	—	—	Apache Hive: SQL injection vulnerability when processing delete column statistics requests via the HMS Thrift APIs	Nov 26, 2025 7mo ago
CVE-2025-65998	—	—	Apache Syncope: Default AES key used for internal password encryption	Nov 24, 2025 7mo ago
CVE-2025-64408	—	—	Apache Causeway: Java deserialization vulnerability to authenticated attackers	Nov 19, 2025 7mo ago
CVE-2025-61623	—	—	Apache OFBiz: Reflected Cross-site Scripting	Nov 12, 2025 7mo ago
CVE-2025-59118	—	—	Apache OFBiz: Critical Remote Command Execution via Unrestricted File Upload	Nov 12, 2025 7mo ago
CVE-2025-64407	—	—	Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables	Nov 12, 2025 7mo ago
CVE-2025-64406	—	—	Apache OpenOffice: Possible memory corruption during CSV import	Nov 12, 2025 7mo ago
CVE-2025-64405	—	—	Apache OpenOffice: Remote documents loaded without prompt via DDE function	Nov 12, 2025 7mo ago
CVE-2025-64404	—	—	Apache OpenOffice: Remote documents loaded without prompt via background and bullet images	Nov 12, 2025 7mo ago
CVE-2025-64403	—	—	Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc	Nov 12, 2025 7mo ago
CVE-2025-64402	—	—	Apache OpenOffice: Remote documents loaded without prompt via OLE objects	Nov 12, 2025 7mo ago
CVE-2025-64401	—	—	Apache OpenOffice: Remote documents loaded without prompt via IFrame	Nov 12, 2025 7mo ago
CVE-2025-58337	—	—	Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode for doris-mcp-server MCP Server	Nov 5, 2025 7mo ago
CVE-2025-62232	—	—	Apache APISIX: basic-auth logs plaintext credentials at info level	Oct 31, 2025 7mo ago
CVE-2024-58273	high	8.5/10	Nagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root	Oct 30, 2025 8mo ago
CVE-2025-54941	—	—	Apache Airflow: Command injection in "example_dag_decorator"	Oct 30, 2025 8mo ago
CVE-2025-62402	—	—	Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API	Oct 30, 2025 8mo ago
CVE-2025-62503	—	—	Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)	Oct 30, 2025 8mo ago
CVE-2025-61795	—	—	Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS	Oct 27, 2025 8mo ago
CVE-2025-55752	—	—	Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled	Oct 27, 2025 8mo ago
CVE-2025-55754	—	—	Apache Tomcat: console manipulation via escape sequences in log messages	Oct 27, 2025 8mo ago
CVE-2025-57738	—	—	Apache Syncope: Remote Code Execution by delegated administrators	Oct 20, 2025 8mo ago