Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,892

All time

Critical · Active

12,057

CVSS ≥ 9.0

New · 14 days

2,560

Newly disclosed

Feed last synced

20 mins ago

Data freshness

Showing 541–570 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-24015	—	—	Apache IoTDB: Insecure Default Configuration Vulnerability	Mar 9, 2026 5mo ago
CVE-2026-24308	—	—	Apache ZooKeeper: Sensitive information disclosure in client configuration handling	Mar 7, 2026 5mo ago
CVE-2026-24281	—	—	Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager	Mar 7, 2026 5mo ago
CVE-2025-40931	—	—	Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id	Mar 5, 2026 5mo ago
CVE-2026-27446	critical	9.3/10	Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation	Mar 4, 2026 5mo ago
CVE-2025-66168	medium	5.4/10	Apache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validated	Mar 4, 2026 5mo ago
CVE-2025-59060	—	—	Apache Ranger: Hostname verification bypass in NiFiRegistryClient and NifiClient	Mar 3, 2026 5mo ago
CVE-2025-59059	—	—	Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator	Mar 3, 2026 5mo ago
CVE-2025-30044	critical	9.4/10	RCE on uhcapache user permissions	Mar 2, 2026 5mo ago
CVE-2025-40932	—	—	Apache::SessionX versions through 2.01 for Perl create insecure session id	Feb 26, 2026 6mo ago
CVE-2026-27636	high	8.8/10	FreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on Apache	Feb 25, 2026 6mo ago
CVE-2026-23969	medium	5.3/10	Apache Superset: Exposure of Sensitive Information via Incomplete ClickHouse Function Filtering	Feb 24, 2026 6mo ago
CVE-2026-23980	medium	5.3/10	Apache Superset: Improper Neutralization of Special Elements used in a SQL Command	Feb 24, 2026 6mo ago
CVE-2026-23982	high	7.1/10	Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass	Feb 24, 2026 6mo ago
CVE-2026-23983	low	2.3/10	Apache Superset: Sensitive Data Exposure via REST API (disabled by default)	Feb 24, 2026 6mo ago
CVE-2026-23984	high	7.1/10	Apache Superset: SQLLab Read-Only Bypass on PostgreSQL	Feb 24, 2026 6mo ago
CVE-2024-56373	—	—	Apache Airflow: SSTI to Code Execution in Airflow through Shared DB Information	Feb 24, 2026 6mo ago
CVE-2026-25747	—	—	Apache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB	Feb 23, 2026 6mo ago
CVE-2026-23552	—	—	Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy	Feb 23, 2026 6mo ago
CVE-2025-65995	—	—	Apache Airflow: Disclosure of secrets to UI via kwargs	Feb 21, 2026 6mo ago
CVE-2026-24734	—	—	Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass	Feb 17, 2026 6mo ago
CVE-2026-24733	—	—	Apache Tomcat: Security constraint bypass with HTTP/0.9	Feb 17, 2026 6mo ago
CVE-2025-66614	—	—	Apache Tomcat: Client certificate verification bypass due to virtual host mapping	Feb 17, 2026 6mo ago
CVE-2026-25087	—	—	Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering	Feb 17, 2026 6mo ago
CVE-2026-25903	high	8.7/10	Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates	Feb 17, 2026 6mo ago
CVE-2025-33042	—	—	Apache Avro Java SDK: Code injection on Java generated code	Feb 13, 2026 6mo ago
CVE-2026-24343	—	—	Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions	Feb 10, 2026 6mo ago
CVE-2026-23906	—	—	Apache Druid: Authentication Bypass via LDAP Anonymous Bind	Feb 10, 2026 6mo ago
CVE-2026-23901	low	1.0/10	Apache Shiro: Brute force attack possible to determine valid user names	Feb 10, 2026 6mo ago
CVE-2026-22922	—	—	Apache Airflow: Airflow externalLogUrl Permission Bypass	Feb 9, 2026 6mo ago