Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

23 hrs ago

Data freshness

Showing 481–510 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-47436	medium	6.0/10	Apache ORC: Potential Heap Buffer Overflow during C++ LZO Decompression	May 14, 2025 1y ago
CVE-2025-26864	—	—	Apache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication	May 14, 2025 1y ago
CVE-2025-26795	—	—	Apache IoTDB JDBC driver: Exposure of Sensitive Information in IoTDB JDBC driver	May 14, 2025 1y ago
CVE-2024-24780	—	—	Apache IoTDB: Remote Code Execution with untrusted URI of User-defined function	May 14, 2025 1y ago
CVE-2025-27696	medium	5.3/10	Apache Superset: Incorrect authorization leading to resource ownership takeover	May 13, 2025 1y ago
CVE-2025-46392	—	—	Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x	May 9, 2025 1y ago
CVE-2025-46762	high	7.1/10	Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata	May 6, 2025 1y ago
CVE-2025-31651	—	—	Apache Tomcat: Bypass of rules in Rewrite Valve	Apr 28, 2025 1y ago
CVE-2025-31650	—	—	Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame	Apr 28, 2025 1y ago
CVE-2025-27820	—	—	Apache HttpComponents: PSL (Public Suffix List) validation bypass	Apr 24, 2025 1y ago
CVE-2025-26413	—	—	Apache Kvrocks: The server was crashed by the negative offset	Apr 22, 2025 1y ago
CVE-2025-29953	—	—	Apache ActiveMQ NMS OpenWire Client: deserialization allowlist bypass	Apr 18, 2025 1y ago
CVE-2025-3790	medium	6.9/10	baseweb JSite Apache Druid Monitoring Console index.html access control	Apr 18, 2025 1y ago
CVE-2024-56736	—	—	Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss	Apr 16, 2025 1y ago
CVE-2025-24859	low	2.1/10	Apache Roller: Insufficient Session Expiration on Password Change	Apr 14, 2025 1y ago
CVE-2025-31672	—	—	Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names	Apr 9, 2025 1y ago
CVE-2025-30677	medium	6.3/10	Apache Pulsar IO Kafka Connector, Apache Pulsar IO Kafka Connect Adaptor: Sensitive information logged in Pulsar's Apache Kafka Connectors	Apr 9, 2025 1y ago
CVE-2025-30473	—	—	Apache Airflow Common SQL Provider: Remote Code Execution via Sql Injection	Apr 7, 2025 1y ago
CVE-2024-53868	—	—	Apache Traffic Server: Malformed chunked message body allows request smuggling	Apr 3, 2025 1y ago
CVE-2025-30676	—	—	Apache OFBiz: Stored XSS Vulnerability	Apr 1, 2025 1y ago
CVE-2025-30177	—	—	Apache Camel: Camel-Undertow Message Header Injection via Improper Filtering	Apr 1, 2025 1y ago
CVE-2024-56325	—	—	Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required	Apr 1, 2025 1y ago
CVE-2025-29868	—	—	Apache Answer: Using externally referenced images can leak user privacy.	Apr 1, 2025 1y ago
CVE-2025-30065	critical	10.0/10	Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata	Apr 1, 2025 1y ago
CVE-2025-30067	—	—	Apache Kylin: The remote code execution via jdbc url	Mar 27, 2025 1y ago
CVE-2024-48944	—	—	Apache Kylin: SSRF vulnerability in the diagnosis api	Mar 27, 2025 1y ago
CVE-2024-53679	high	8.4/10	Apache VCL: XSS vulnerability in User Lookup impacting user privileges	Mar 25, 2025 1y ago
CVE-2024-53678	medium	5.1/10	Apache VCL: SQL injection vulnerability in New Block Allocation form	Mar 25, 2025 1y ago
CVE-2025-30474	—	—	Apache Commons VFS: Failing to find an FTP file can reveal the URI's password in an error message	Mar 23, 2025 1y ago
CVE-2025-26796	—	—	Apache Oozie: XSS in Oozie Web Console	Mar 22, 2025 1y ago