Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

700

Newly disclosed

Feed last synced

20 hrs ago

Data freshness

Showing 421–450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-55675	medium	5.3/10	Apache Superset: Incorrect datasource authorization on REST API	Aug 14, 2025 10mo ago
CVE-2025-55674	medium	5.3/10	Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions	Aug 14, 2025 10mo ago
CVE-2025-55672	medium	5.3/10	Apache Superset: Stored XSS on charts metadata	Aug 14, 2025 10mo ago
CVE-2025-55673	medium	5.3/10	Apache Superset: Metadata exposure in embedded charts	Aug 14, 2025 10mo ago
CVE-2025-54472	—	—	Apache bRPC: Redis Parser Remote Denial of Service	Aug 14, 2025 10mo ago
CVE-2025-55668	—	—	Apache Tomcat: session fixation via rewrite valve	Aug 13, 2025 10mo ago
CVE-2025-48989	—	—	Apache Tomcat: h2 DoS - Made You Reset	Aug 13, 2025 10mo ago
CVE-2025-53606	—	—	Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server	Aug 8, 2025 10mo ago
CVE-2025-48913	—	—	Apache CXF: Untrusted JMS configuration can lead to RCE	Aug 8, 2025 10mo ago
CVE-2024-51775	—	—	Apache Zeppelin: Command Injection via CSWSH	Aug 3, 2025 10mo ago
CVE-2024-41177	—	—	Apache Zeppelin: XSS in the Helium module	Aug 3, 2025 10mo ago
CVE-2024-52279	—	—	Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string	Aug 3, 2025 10mo ago
CVE-2025-24854	—	—	Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin	Jul 31, 2025 11mo ago
CVE-2025-24853	—	—	Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing	Jul 31, 2025 11mo ago
CVE-2025-54656	—	—	Apache Struts Extras: Improper Output Neutralization for Logs	Jul 30, 2025 11mo ago
CVE-2025-54090	—	—	Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64	Jul 23, 2025 11mo ago
CVE-2025-50151	—	—	Apache Jena: Configuration files uploaded by administrative users are not check properly	Jul 21, 2025 11mo ago
CVE-2025-49656	—	—	Apache Jena: Administrative users can create files outside the server directory space via the admin UI	Jul 21, 2025 11mo ago
CVE-2025-54064	medium	6.9/10	rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles	Jul 17, 2025 11mo ago
CVE-2025-48795	—	—	Apache CXF: Denial of Service and sensitive data exposure in logs	Jul 15, 2025 11mo ago
CVE-2025-53689	—	—	Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons	Jul 14, 2025 11mo ago
CVE-2024-41169	—	—	Apache Zeppelin: raft directory listing and file read	Jul 12, 2025 11mo ago
CVE-2025-48924	—	—	Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs	Jul 11, 2025 11mo ago
CVE-2025-53506	—	—	Apache Tomcat: DoS via excessive h2 streams at connection start	Jul 10, 2025 11mo ago
CVE-2025-52520	—	—	Apache Tomcat: DoS via integer overflow in multipart file upload	Jul 10, 2025 11mo ago
CVE-2025-52434	—	—	Apache Tomcat: APR/Native Connector crash leading to DoS	Jul 10, 2025 11mo ago
CVE-2025-53020	—	—	Apache HTTP Server: HTTP/2 DoS by Memory Increase	Jul 10, 2025 11mo ago
CVE-2025-49812	—	—	Apache HTTP Server: mod_ssl TLS upgrade attack	Jul 10, 2025 11mo ago
CVE-2025-49630	—	—	Apache HTTP Server: mod_proxy_http2 denial of service	Jul 10, 2025 11mo ago
CVE-2025-23048	—	—	Apache HTTP Server: mod_ssl access control bypass with session resumption	Jul 10, 2025 11mo ago