Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

701

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 571–600 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-41137	—	—	Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore	Dec 5, 2024 1y ago
CVE-2024-45106	—	—	Apache Ozone: Improper authentication when generating S3 secrets	Dec 3, 2024 1y ago
CVE-2024-52338	—	—	Apache Arrow R package: Arbitrary code execution when loading a malicious data file	Nov 28, 2024 1y ago
CVE-2024-51569	—	—	Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler	Nov 26, 2024 1y ago
CVE-2024-47250	—	—	Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access	Nov 26, 2024 1y ago
CVE-2024-47249	—	—	Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler	Nov 26, 2024 1y ago
CVE-2024-47248	—	—	Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack	Nov 26, 2024 1y ago
CVE-2024-45719	—	—	Apache Answer: Predictable Authorization Token Using UUIDv1	Nov 22, 2024 1y ago
CVE-2024-52067	medium	6.9/10	Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log	Nov 21, 2024 1y ago
CVE-2024-31141	—	—	Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider	Nov 19, 2024 1y ago
CVE-2024-52318	—	—	Apache Tomcat: Incorrect JSP tag recycling leads to XSS	Nov 18, 2024 1y ago
CVE-2024-52317	—	—	Apache Tomcat: Request/response mix-up with HTTP/2	Nov 18, 2024 1y ago
CVE-2024-52316	—	—	Apache Tomcat: Authentication bypass when using Jakarta Authentication API	Nov 18, 2024 1y ago
CVE-2024-41151	—	—	Apache HertzBeat: RCE by notice template injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-45791	—	—	Apache HertzBeat: Exposure sensitive token via http GET method with query string	Nov 18, 2024 1y ago
CVE-2024-45505	—	—	Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities	Nov 18, 2024 1y ago
CVE-2024-47208	—	—	Apache OFBiz: URLs allowing remote use of Groovy expressions, leading to RCE	Nov 18, 2024 1y ago
CVE-2024-48962	high	8.9/10	Apache OFBiz: Bypass SameSite restrictions with target redirection using URL parameters (SSTI and CSRF leading to RCE)	Nov 18, 2024 1y ago
CVE-2024-45784	—	—	Apache Airflow: Sensitive configuration values are not masked in the logs by default	Nov 15, 2024 1y ago
CVE-2024-50306	—	—	Apache Traffic Server: Server process can fail to drop privilege	Nov 14, 2024 1y ago
CVE-2024-50305	—	—	Apache Traffic Server: Valid Host field value can cause crashes	Nov 14, 2024 1y ago
CVE-2024-38479	—	—	Apache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack	Nov 14, 2024 1y ago
CVE-2024-50386	high	8.5/10	Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure	Nov 12, 2024 1y ago
CVE-2024-50378	—	—	Apache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cli	Nov 8, 2024 1y ago
CVE-2024-51504	—	—	Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server	Nov 7, 2024 1y ago
CVE-2024-38286	high	8.6/10	Apache Tomcat: Denial of Service	Nov 7, 2024 1y ago
CVE-2024-23590	—	—	Apache Kylin: Session fixation in web interface	Nov 4, 2024 1y ago
CVE-2024-43383	high	8.0/10	Apache Lucene.Net.Replicator: Remote Code Execution in Lucene.Net.Replicator	Oct 31, 2024 1y ago
CVE-2024-45477	medium	4.6/10	Apache NiFi: Improper Neutralization of Input in Parameter Description	Oct 29, 2024 1y ago
CVE-2024-45031	—	—	Apache Syncope: Stored XSS in Console and Enduser	Oct 24, 2024 1y ago