Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

700

Newly disclosed

Feed last synced

19 hrs ago

Data freshness

Showing 391–420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-47410	—	—	Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system	Oct 18, 2025 8mo ago
CVE-2025-61581	—	—	Apache Traffic Control: ReDoS issue in Traffic Router configuration	Oct 16, 2025 8mo ago
CVE-2025-54539	—	—	Apache ActiveMQ NMS AMQP Client: Deserialization of Untrusted Data	Oct 16, 2025 8mo ago
CVE-2025-55039	—	—	Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks	Oct 15, 2025 8mo ago
CVE-2024-44088	—	—	Apache Geode: Reflected XSS	Oct 14, 2025 8mo ago
CVE-2025-30001	—	—	Apache StreamPark: Authenticated users can trigger remote command execution	Oct 10, 2025 8mo ago
CVE-2025-62228	medium	5.1/10	Apache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC: SQL injection via maliciously crafted identifiers	Oct 9, 2025 8mo ago
CVE-2025-61735	—	—	Apache Kylin: Server-Side Request Forgery	Oct 2, 2025 8mo ago
CVE-2025-61733	—	—	Apache Kylin: Authentication bypass	Oct 2, 2025 8mo ago
CVE-2025-61734	—	—	Apache Kylin: improper restriction of file read	Oct 2, 2025 8mo ago
CVE-2025-61622	—	—	Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory	Oct 1, 2025 8mo ago
CVE-2025-54831	—	—	Apache Airflow: Connection sensitive details exposed to users with READ permissions	Sep 26, 2025 9mo ago
CVE-2025-58457	—	—	Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands	Sep 24, 2025 9mo ago
CVE-2025-48392	—	—	Apache IoTDB: DoS Vulnerability	Sep 24, 2025 9mo ago
CVE-2025-48459	—	—	Apache IoTDB: Deserialization of untrusted Data	Sep 24, 2025 9mo ago
CVE-2025-40933	—	—	Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely	Sep 17, 2025 9mo ago
CVE-2025-59328	—	—	Apache Fory: Denial of Service (DoS) due to Deserialization of Untrusted malicious large Data	Sep 15, 2025 9mo ago
CVE-2025-48208	—	—	Apache HertzBeat (incubating): Jmx JNDI injection vulnerability	Sep 9, 2025 9mo ago
CVE-2025-24404	—	—	Apache HertzBeat (incubating): RCE by parse http sitemap xml response	Sep 9, 2025 9mo ago
CVE-2025-58782	—	—	Apache Jackrabbit Core, Apache Jackrabbit JCR Commons: JNDI injection risk with JndiRepositoryFactory	Sep 8, 2025 9mo ago
CVE-2024-43115	—	—	Apache DolphinScheduler: Alert Script Attack	Sep 3, 2025 9mo ago
CVE-2025-30057	critical	9.4/10	Authenticated RCE with uhcapache privileges in ConvertToPDF	Aug 27, 2025 10mo ago
CVE-2025-26467	—	—	Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)	Aug 25, 2025 10mo ago
CVE-2025-54812	low	2.1/10	Apache Log4cxx: Improper HTML escaping in HTMLLayout	Aug 22, 2025 10mo ago
CVE-2025-54813	medium	6.3/10	Apache Log4cxx: Improper escaping with JSONLayout	Aug 22, 2025 10mo ago
CVE-2024-48988	—	—	Apache StreamPark: SQL injection vulnerability	Aug 22, 2025 10mo ago
CVE-2025-54988	high	8.4/10	Apache Tika PDF parser module: XXE vulnerability in PDFParser's handling of XFA	Aug 20, 2025 10mo ago
CVE-2024-39954	—	—	Apache EventMesh Runtime: SSRF	Aug 20, 2025 10mo ago
CVE-2025-53192	—	—	Apache Commons OGNL: Expression Injection leading to RCE	Aug 18, 2025 10mo ago
CVE-2025-54466	—	—	Apache OFBiz: RCE Vulnerability in scrum plugin	Aug 15, 2025 10mo ago