Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

1 day ago

Data freshness

Showing 511–540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-27888	medium	5.8/10	Apache Druid: Server-Side Request Forgery and Cross-Site Scripting	Mar 20, 2025 1y ago
CVE-2024-54016	—	—	compression bomb attack in Apache Seata Server	Mar 20, 2025 1y ago
CVE-2024-47552	—	—	Apache Seata (incubating): Deserialization of untrusted Data in jraft mode in Apache Seata Server	Mar 20, 2025 1y ago
CVE-2025-27018	—	—	Apache Airflow MySQL Provider: SQL injection in MySQL provider core function	Mar 19, 2025 1y ago
CVE-2025-27017	medium	6.9/10	Apache NiFi: Potential Insertion of MongoDB Password in Provenance Record	Mar 12, 2025 1y ago
CVE-2025-27867	—	—	Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin	Mar 12, 2025 1y ago
CVE-2025-29891	—	—	Apache Camel: Camel Message Header Injection through request parameters	Mar 12, 2025 1y ago
CVE-2025-24813	—	—	Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT	Mar 10, 2025 1y ago
CVE-2025-26865	—	—	Apache OFBiz: Server-Side Template Injection affecting the ecommerce plugin leading to possible RCE	Mar 10, 2025 1y ago
CVE-2024-38311	—	—	Apache Traffic Server: Request smuggling via pipelining after a chunked message body	Mar 6, 2025 1y ago
CVE-2024-56195	—	—	Apache Traffic Server: Intercept plugins are not access controlled	Mar 6, 2025 1y ago
CVE-2024-56196	—	—	Apache Traffic Server: ACL is not fully compatible with older versions	Mar 6, 2025 1y ago
CVE-2024-56202	—	—	Apache Traffic Server: Expect header field can unreasonably retain resource	Mar 6, 2025 1y ago
CVE-2024-55532	—	—	Apache Ranger: Improper Neutralization of Formula Elements in a CSV File	Mar 3, 2025 1y ago
CVE-2024-24778	—	—	Apache StreamPipes: Resources Permission Escalation	Mar 3, 2025 1y ago
CVE-2025-1075	medium	5.6/10	LDAP credentials logged to Apache error log	Feb 19, 2025 1y ago
CVE-2024-56180	—	—	Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution	Feb 14, 2025 1y ago
CVE-2024-52577	critical	9.5/10	Apache Ignite: Possible RCE when deserializing incoming messages by the server node	Feb 14, 2025 1y ago
CVE-2024-46910	—	—	Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user	Feb 13, 2025 1y ago
CVE-2024-32838	critical	9.4/10	Apache Fineract: SQL injection vulnerabilities in offices API endpoint	Feb 12, 2025 1y ago
CVE-2025-25247	—	—	Apache Felix Webconsole: XSS in services console	Feb 10, 2025 1y ago
CVE-2025-25069	—	—	Apache Kvrocks: Cross-Protocol Scripting Vulnerability	Feb 7, 2025 1y ago
CVE-2022-31764	—	—	Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC	Feb 6, 2025 1y ago
CVE-2024-37358	high	8.6/10	Apache James: denial of service through the use of IMAP literals	Feb 6, 2025 1y ago
CVE-2024-45626	medium	6.5/10	Apache James: denial of service through JMAP HTML to text conversion	Feb 6, 2025 1y ago
CVE-2024-48019	—	—	Apache Doris: allows admin users to read arbitrary files through the REST API	Feb 4, 2025 1y ago
CVE-2024-27137	—	—	Apache Cassandra: unrestricted deserialization of JMX authentication credentials	Feb 4, 2025 1y ago
CVE-2025-24860	—	—	Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions	Feb 4, 2025 1y ago
CVE-2025-23015	—	—	Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions	Feb 4, 2025 1y ago
CVE-2024-29869	—	—	Apache Hive: Credentials file created with non restrictive permissions	Jan 28, 2025 1y ago