Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,749

All time

Critical · Active

12,050

CVSS ≥ 9.0

New · 14 days

2,442

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 361–390 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-27173	—	—	Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments	May 19, 2026 3mo ago
CVE-2026-42526	—	—	Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends	May 19, 2026 3mo ago
CVE-2026-47323	—	—	Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering	May 19, 2026 3mo ago
CVE-2026-46586	—	—	Apache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code Execution	May 19, 2026 3mo ago
CVE-2026-45434	—	—	Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE	May 19, 2026 3mo ago
CVE-2026-45187	—	—	Apache OFBiz: Improper Authorization in Scheduled Job Creation Allows Low-Privileged Users to Submit System Jobs	May 19, 2026 3mo ago
CVE-2026-41919	—	—	Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction	May 19, 2026 3mo ago
CVE-2026-35086	—	—	Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email services	May 19, 2026 3mo ago
CVE-2026-31986	—	—	Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template Injection	May 19, 2026 3mo ago
CVE-2026-31910	—	—	Apache OFBiz: Improper Input Validation in UI Factory Classes Leads to SSRF and Blind File Access	May 19, 2026 3mo ago
CVE-2026-31909	—	—	Apache OFBiz: Unauthenticated Shipment Label Image Disclosure	May 19, 2026 3mo ago
CVE-2026-31906	—	—	Apache OFBiz: Reflected XSS via Improper HTML Attribute Escaping in Layered-Modal Dialog Parameters	May 19, 2026 3mo ago
CVE-2026-31388	—	—	Apache OFBiz: Cross-Tenant Data Exposure via Program Export Feature	May 19, 2026 3mo ago
CVE-2026-31387	—	—	Apache OFBiz: Cookie Manipulation Allows Authenticated JWT Forgery and Account Impersonation	May 19, 2026 3mo ago
CVE-2026-31380	—	—	Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass	May 19, 2026 3mo ago
CVE-2026-31379	—	—	Apache OFBiz: Path Traversal and File Upload Validation Bypass Leading to Arbitrary File Write, Stored XSS and RCE in Catalog Manager	May 19, 2026 3mo ago
CVE-2026-31378	—	—	Apache OFBiz: JSON Attribute Override and URL Allowlist Bypass Leads to Remote Code Execution	May 19, 2026 3mo ago
CVE-2026-29226	—	—	Apache OFBiz: Low-Privilege SSRF in Content Component	May 19, 2026 3mo ago
CVE-2026-29207	—	—	Apache OFBiz: Low-Privilege SSTI Leading to RCE in the Content Component	May 19, 2026 3mo ago
CVE-2026-29220	—	—	Apache OFBiz: Low-Privilege LFI in Content Component	May 19, 2026 3mo ago
CVE-2026-35194	—	—	Apache Flink: Remote code execution via SQL injection in code generation	May 15, 2026 3mo ago
CVE-2026-8503	—	—	Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids	May 15, 2026 3mo ago
CVE-2026-45205	—	—	Apache Commons Configuration: StackOverflowError for YAML input with cycles	May 14, 2026 3mo ago
CVE-2026-43515	—	—	Apache Tomcat: Security constraints not correctly applied	May 12, 2026 3mo ago
CVE-2026-43514	—	—	Apache Tomcat: AJP secret compared in non-constant time	May 12, 2026 3mo ago
CVE-2026-43513	—	—	Apache Tomcat: LockOutRealm treats user names as case-sensitive	May 12, 2026 3mo ago
CVE-2026-43512	—	—	Apache Tomcat: Digest authenticator will authenticate any unknown user	May 12, 2026 3mo ago
CVE-2026-41293	—	—	Apache Tomcat: HTTP/2 request headers not validated	May 12, 2026 3mo ago
CVE-2026-42498	—	—	Apache Tomcat: WebSocket authentication header exposure	May 12, 2026 3mo ago
CVE-2026-41284	—	—	Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling	May 12, 2026 3mo ago