Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,787

All time

Critical · Active

12,053

CVSS ≥ 9.0

New · 14 days

2,456

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 511–540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-40046	—	—	Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validated	Apr 9, 2026 4mo ago
CVE-2026-33005	—	—	Apache OpenMeetings: Insufficient checks in FileWebService	Apr 9, 2026 4mo ago
CVE-2026-33266	—	—	Apache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and Salt	Apr 9, 2026 4mo ago
CVE-2026-34020	—	—	Apache OpenMeetings: Login Credentials Passed via GET Query Parameters	Apr 9, 2026 4mo ago
CVE-2025-57735	—	—	Apache Airflow: Airflow Logout Not Invalidating JWT	Apr 9, 2026 4mo ago
CVE-2025-62188	—	—	Apache DolphinScheduler: Users can access sensitive information through the actuator endpoint.	Apr 9, 2026 4mo ago
CVE-2026-34538	—	—	Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)	Apr 9, 2026 4mo ago
CVE-2026-32588	—	—	Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing	Apr 7, 2026 4mo ago
CVE-2026-27315	—	—	Apache Cassandra: cqlsh history sensitive information leak	Apr 7, 2026 4mo ago
CVE-2026-27314	—	—	Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypass	Apr 7, 2026 4mo ago
CVE-2026-35554	—	—	Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition	Apr 7, 2026 4mo ago
CVE-2026-33227	—	—	Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory	Apr 7, 2026 4mo ago
CVE-2026-34197	—	—	Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans	Apr 7, 2026 4mo ago
CVE-2025-65114	—	—	Apache Traffic Server: Malformed chunked message body allows request smuggling	Apr 2, 2026 4mo ago
CVE-2025-58136	—	—	Apache Traffic Server: A simple legitimate POST request causes a crash	Apr 2, 2026 4mo ago
CVE-2026-32794	—	—	Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange	Mar 30, 2026 4mo ago
CVE-2026-4649	medium	5.3/10	Auth bypass in Apache Artemis allows reading all internal messages	Mar 24, 2026 5mo ago
CVE-2026-32642	low	2.3/10	Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission	Mar 24, 2026 5mo ago
CVE-2026-28563	—	—	Apache Airflow: DAG authorization bypass	Mar 17, 2026 5mo ago
CVE-2026-26929	—	—	Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata	Mar 17, 2026 5mo ago
CVE-2026-30911	—	—	Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization	Mar 17, 2026 5mo ago
CVE-2026-28779	—	—	Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications	Mar 17, 2026 5mo ago
CVE-2025-54920	—	—	Apache Spark: Spark History Server Code Execution Vulnerability	Mar 14, 2026 5mo ago
CVE-2025-60012	—	—	Apache Livy: Restrict file access	Mar 13, 2026 5mo ago
CVE-2025-66249	—	—	Apache Livy: Unauthorized directory access	Mar 13, 2026 5mo ago
CVE-2026-3963	medium	6.3/10	perfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key	Mar 11, 2026 5mo ago
CVE-2026-23907	—	—	Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code	Mar 10, 2026 5mo ago
CVE-2026-25604	—	—	Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass	Mar 9, 2026 5mo ago
CVE-2025-69219	—	—	Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator	Mar 9, 2026 5mo ago
CVE-2026-24713	—	—	Apache IoTDB: JEXL Expression Injection Vulnerability	Mar 9, 2026 5mo ago