Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

21 hrs ago

Data freshness

Showing 451–480 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43394	—	—	Apache HTTP Server: SSRF on Windows due to UNC paths	Jul 10, 2025 11mo ago
CVE-2024-47252	—	—	Apache HTTP Server: mod_ssl error log variable escaping	Jul 10, 2025 11mo ago
CVE-2024-43204	—	—	Apache HTTP Server: SSRF with mod_headers setting Content-Type header	Jul 10, 2025 11mo ago
CVE-2024-42516	—	—	Apache HTTP Server: HTTP response splitting	Jul 10, 2025 11mo ago
CVE-2024-35164	medium	6.8/10	Apache Guacamole: Improper input validation of console codes	Jul 2, 2025 12mo ago
CVE-2025-46647	—	—	Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect	Jul 2, 2025 12mo ago
CVE-2025-32897	—	—	Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server	Jun 28, 2025 12mo ago
CVE-2025-50213	—	—	Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator	Jun 24, 2025 1y ago
CVE-2025-32896	—	—	Apache SeaTunnel: Unauthenticated insecure access	Jun 19, 2025 1y ago
CVE-2025-31698	—	—	Apache Traffic Server: Client IP address from PROXY protocol is not used for ACL	Jun 19, 2025 1y ago
CVE-2025-49763	—	—	Apache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin	Jun 19, 2025 1y ago
CVE-2025-48976	—	—	Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers	Jun 16, 2025 1y ago
CVE-2025-49124	—	—	Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows	Jun 16, 2025 1y ago
CVE-2025-49125	—	—	Apache Tomcat: Security constraint bypass for pre/post-resources	Jun 16, 2025 1y ago
CVE-2025-48988	—	—	Apache Tomcat: FileUpload large number of parts with headers DoS	Jun 16, 2025 1y ago
CVE-2025-47869	—	—	Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.	Jun 16, 2025 1y ago
CVE-2025-47868	—	—	Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.	Jun 16, 2025 1y ago
CVE-2025-30675	medium	4.7/10	Apache CloudStack: Unauthorised template/ISO list access to the domain/resource admins	Jun 10, 2025 1y ago
CVE-2025-22829	low	2.3/10	Apache CloudStack: Unauthorised access to dedicated resources in Quota plugin	Jun 10, 2025 1y ago
CVE-2025-26521	—	—	Apache CloudStack: CKS cluster in project exposes user API keys	Jun 10, 2025 1y ago
CVE-2025-47849	—	—	Apache CloudStack: Insecure access of user's API/Secret Keys in the same domain	Jun 10, 2025 1y ago
CVE-2025-47713	—	—	Apache CloudStack: Domain Admin can reset Admin password in Root Domain	Jun 10, 2025 1y ago
CVE-2025-27817	—	—	Apache Kafka Client: Arbitrary file read and SSRF vulnerability	Jun 10, 2025 1y ago
CVE-2025-27819	—	—	Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration	Jun 10, 2025 1y ago
CVE-2025-27818	—	—	Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration	Jun 10, 2025 1y ago
CVE-2025-46548	—	—	Apache Pekko Management, Apache Pekko Management, Apache Pekko Management, Akka Management, Akka Management, Akka Management: management API basic authentication is not effective	Jun 3, 2025 1y ago
CVE-2025-48912	high	7.1/10	Apache Superset: Improper authorization bypass on row level security via SQL Injection	May 30, 2025 1y ago
CVE-2025-46701	—	—	Apache Tomcat: Security constraint bypass for CGI scripts	May 29, 2025 1y ago
CVE-2025-48734	—	—	Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default	May 28, 2025 1y ago
CVE-2025-35003	—	—	Apache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.	May 26, 2025 1y ago