Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

701

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 541–570 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-23953	—	—	Apache Hive: Timing Attack Against Signature in LLAP util	Jan 28, 2025 1y ago
CVE-2025-24783	—	—	Apache Cocoon: continuations may not be private	Jan 27, 2025 1y ago
CVE-2025-24814	—	—	Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files	Jan 27, 2025 1y ago
CVE-2024-52012	—	—	Apache Solr: Configset upload on Windows allows arbitrary path write-access	Jan 27, 2025 1y ago
CVE-2024-53299	—	—	Apache Wicket: An attacker can intentionally trigger a memory leak	Jan 23, 2025 1y ago
CVE-2024-45479	—	—	Apache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost	Jan 21, 2025 1y ago
CVE-2024-45478	—	—	Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input	Jan 21, 2025 1y ago
CVE-2024-51941	—	—	Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts	Jan 21, 2025 1y ago
CVE-2025-23196	—	—	Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition	Jan 21, 2025 1y ago
CVE-2025-23195	—	—	Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie	Jan 21, 2025 1y ago
CVE-2025-23184	medium	5.9/10	Apache CXF: Denial of Service vulnerability with temporary files	Jan 21, 2025 1y ago
CVE-2024-45627	—	—	Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability	Jan 14, 2025 1y ago
CVE-2025-22828	—	—	Apache CloudStack: Unauthorised access to annotations	Jan 13, 2025 1y ago
CVE-2024-45033	—	—	Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli	Jan 8, 2025 1y ago
CVE-2024-54676	—	—	Apache OpenMeetings: Deserialisation of untrusted data in cluster mode	Jan 8, 2025 1y ago
CVE-2024-56512	low	2.1/10	Apache NiFi: Missing Complete Authorization for Parameter and Service References	Dec 28, 2024 1y ago
CVE-2024-52046	critical	10.0/10	Apache MINA: MINA applications using unbounded deserialization may allow RCE	Dec 25, 2024 1y ago
CVE-2024-43441	—	—	Apache HugeGraph-Server: Fixed JWT Token(Secret)	Dec 24, 2024 1y ago
CVE-2024-45387	critical	9.9/10	Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments	Dec 23, 2024 1y ago
CVE-2024-23945	—	—	Apache Hive, Apache Spark, Apache Spark: CookieSigner exposes the correct signature when message verification fails	Dec 23, 2024 1y ago
CVE-2024-56337	—	—	Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete	Dec 20, 2024 1y ago
CVE-2024-56128	—	—	Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption	Dec 18, 2024 1y ago
CVE-2024-54677	—	—	Apache Tomcat: DoS in examples web application	Dec 17, 2024 1y ago
CVE-2024-50379	—	—	Apache Tomcat: RCE due to TOCTOU issue in JSP compilation	Dec 17, 2024 1y ago
CVE-2024-55633	high	7.1/10	Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	Dec 12, 2024 1y ago
CVE-2024-53677	critical	9.5/10	Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks	Dec 11, 2024 1y ago
CVE-2024-53949	high	7.6/10	Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled	Dec 9, 2024 1y ago
CVE-2024-53948	medium	5.3/10	Apache Superset: Error verbosity exposes metadata in analytics databases	Dec 9, 2024 1y ago
CVE-2024-53947	low	2.3/10	Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions	Dec 9, 2024 1y ago
CVE-2024-46901	low	3.1/10	Apache Subversion: mod_dav_svn denial-of-service via control characters in paths	Dec 9, 2024 1y ago