Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,892

All time

Critical · Active

12,057

CVSS ≥ 9.0

New · 14 days

2,560

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 601–630 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-66388	—	—	Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI	Dec 15, 2025 8mo ago
CVE-2025-53960	—	—	Apache StreamPark: Uses the user’s password as the secret key	Dec 12, 2025 8mo ago
CVE-2025-54947	—	—	Apache StreamPark: Use hard-coded key vulnerability	Dec 12, 2025 8mo ago
CVE-2025-54981	—	—	Apache StreamPark: Weak Encryption Algorithm in StreamPark	Dec 12, 2025 8mo ago
CVE-2025-26866	—	—	Apache HugeGraph-Server: RAFT and deserialization vulnerability	Dec 12, 2025 8mo ago
CVE-2025-58137	—	—	Apache Fineract: IDOR via self-service API	Dec 12, 2025 8mo ago
CVE-2025-58130	—	—	Apache Fineract: Server Key not masked	Dec 12, 2025 8mo ago
CVE-2025-23408	high	8.5/10	Apache Fineract: weak password policy	Dec 12, 2025 8mo ago
CVE-2025-66675	—	—	Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) - version ranges fixed	Dec 10, 2025 8mo ago
CVE-2025-58098	—	—	Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...	Dec 5, 2025 8mo ago
CVE-2025-66200	—	—	Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo	Dec 5, 2025 8mo ago
CVE-2025-65082	—	—	Apache HTTP Server: CGI environment variable override	Dec 5, 2025 8mo ago
CVE-2025-59775	—	—	Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF	Dec 5, 2025 8mo ago
CVE-2025-55753	—	—	Apache HTTP Server: mod_md (ACME), unintended retry intervals	Dec 5, 2025 8mo ago
CVE-2025-66516	high	8.4/10	Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected	Dec 4, 2025 8mo ago
CVE-2025-64775	—	—	Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS)	Dec 1, 2025 8mo ago
CVE-2025-59789	—	—	Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser	Dec 1, 2025 8mo ago
CVE-2025-59792	—	—	Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins	Nov 28, 2025 9mo ago
CVE-2025-59790	—	—	Apache Kvrocks: RESET command grants admin privileges	Nov 28, 2025 9mo ago
CVE-2025-54057	—	—	Apache SkyWalking: Stored XSS vulnerability	Nov 27, 2025 9mo ago
CVE-2025-59302	—	—	Apache CloudStack: Potential remote code execution on Javascript engine defined rules	Nov 27, 2025 9mo ago
CVE-2025-59454	—	—	Apache CloudStack: Lack of user permission validation leading to data leak for few APIs	Nov 27, 2025 9mo ago
CVE-2025-59390	—	—	Apache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.	Nov 26, 2025 9mo ago
CVE-2025-62728	—	—	Apache Hive: SQL injection vulnerability when processing delete column statistics requests via the HMS Thrift APIs	Nov 26, 2025 9mo ago
CVE-2025-65998	—	—	Apache Syncope: Default AES key used for internal password encryption	Nov 24, 2025 9mo ago
CVE-2025-64408	—	—	Apache Causeway: Java deserialization vulnerability to authenticated attackers	Nov 19, 2025 9mo ago
CVE-2025-61623	—	—	Apache OFBiz: Reflected Cross-site Scripting	Nov 12, 2025 9mo ago
CVE-2025-59118	—	—	Apache OFBiz: Critical Remote Command Execution via Unrestricted File Upload	Nov 12, 2025 9mo ago
CVE-2025-64407	—	—	Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables	Nov 12, 2025 9mo ago
CVE-2025-64406	—	—	Apache OpenOffice: Possible memory corruption during CSV import	Nov 12, 2025 9mo ago