Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 631–660 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43202	—	—	Apache DolphinScheduler: Remote Code Execution Vulnerability	Aug 20, 2024 1y ago
CVE-2024-41909	—	—	Apache MINA SSHD: integrity check bypass	Aug 12, 2024 1y ago
CVE-2024-41888	—	—	Apache Answer: The link for resetting user password is not Single-Use	Aug 9, 2024 1y ago
CVE-2024-41890	—	—	Apache Answer: The link to reset the user's password will remain valid after sending a new link	Aug 9, 2024 1y ago
CVE-2024-30188	—	—	Apache DolphinScheduler: Resource File Read And Write Vulnerability	Aug 9, 2024 1y ago
CVE-2024-29831	—	—	Apache DolphinScheduler: RCE by arbitrary js execution	Aug 9, 2024 1y ago
CVE-2024-42062	—	—	Apache CloudStack: User Key Exposure to Domain Admins	Aug 7, 2024 1y ago
CVE-2024-42222	—	—	Apache CloudStack: Unauthorised Network List Access	Aug 7, 2024 1y ago
CVE-2024-36448	—	—	Apache IoTDB Workbench: SSRF Vulnerability (EOL)	Aug 5, 2024 1y ago
CVE-2024-38856	—	—	Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code	Aug 5, 2024 1y ago
CVE-2024-42447	—	—	Apache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow	Aug 5, 2024 1y ago
CVE-2024-36268	—	—	Apache InLong TubeMQ Client: Remote Code Execution vulnerability	Aug 2, 2024 1y ago
CVE-2024-27182	—	—	Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability	Aug 2, 2024 1y ago
CVE-2024-27181	—	—	Apache Linkis Basic management services: Privilege Escalation Attack vulnerability	Aug 2, 2024 1y ago
CVE-2023-48396	—	—	Apache SeaTunnel Web: Authentication bypass	Jul 30, 2024 1y ago
CVE-2023-38522	—	—	Apache Traffic Server: Incomplete field name check allows request smuggling	Jul 26, 2024 1y ago
CVE-2024-35296	—	—	Apache Traffic Server: Invalid Accept-Encoding can force forwarding requests	Jul 26, 2024 1y ago
CVE-2024-35161	—	—	Apache Traffic Server: Incomplete check for chunked trailer section allows request smuggling	Jul 26, 2024 1y ago
CVE-2024-25090	—	—	Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode	Jul 26, 2024 1y ago
CVE-2023-48362	—	—	Apache Drill: XXE Vulnerability in XML Format Reader	Jul 24, 2024 1y ago
CVE-2024-39676	—	—	Apache Pinot: Unauthorized endpoint exposed sensitive information	Jul 24, 2024 1y ago
CVE-2024-41178	—	—	Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files	Jul 23, 2024 1y ago
CVE-2024-29070	—	—	Apache StreamPark: session not invalidated after logout	Jul 23, 2024 1y ago
CVE-2024-34457	—	—	Apache StreamPark IDOR Vulnerability	Jul 22, 2024 1y ago
CVE-2024-38503	—	—	Apache Syncope: HTML tags can be injected into Console or Enduser text fields	Jul 22, 2024 1y ago
CVE-2024-23321	—	—	Apache RocketMQ: Unauthorized Exposure of Sensitive Data	Jul 22, 2024 1y ago
CVE-2024-41107	—	—	Apache CloudStack: SAML Signature Exclusion	Jul 19, 2024 1y ago
CVE-2024-41172	—	—	Apache CXF: Unrestricted memory consumption in CXF HTTP clients	Jul 19, 2024 1y ago
CVE-2024-32007	—	—	Apache CXF Denial of Service vulnerability in JOSE	Jul 19, 2024 1y ago
CVE-2024-29736	—	—	Apache CXF: SSRF vulnerability via WADL stylesheet parameter	Jul 19, 2024 1y ago