Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 661–690 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-29178	—	—	Apache StreamPark: FreeMarker SSTI RCE Vulnerability	Jul 18, 2024 1y ago
CVE-2024-40725	—	—	Apache HTTP Server: source code disclosure with handlers configured via AddType	Jul 18, 2024 1y ago
CVE-2024-40898	—	—	Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows	Jul 18, 2024 1y ago
CVE-2024-29120	—	—	Apache StreamPark: Information leakage vulnerability	Jul 17, 2024 1y ago
CVE-2024-31411	—	—	Apache StreamPipes: Potential remote code execution (RCE) via file upload	Jul 17, 2024 1y ago
CVE-2024-31979	—	—	Apache StreamPipes: Possibility of SSRF in pipeline element installation process	Jul 17, 2024 1y ago
CVE-2024-30471	—	—	Apache StreamPipes: Potential creation of multiple identical accounts	Jul 17, 2024 1y ago
CVE-2024-29737	—	—	Apache StreamPark (incubating): maven build params could trigger remote command execution	Jul 17, 2024 1y ago
CVE-2023-52291	—	—	Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution	Jul 17, 2024 1y ago
CVE-2024-39877	—	—	Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler	Jul 17, 2024 1y ago
CVE-2024-39863	—	—	Apache Airflow: Potential XSS Vulnerability	Jul 17, 2024 1y ago
CVE-2024-39887	medium	4.3/10	Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions	Jul 16, 2024 1y ago
CVE-2023-52290	—	—	Apache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection vulnerability	Jul 16, 2024 1y ago
CVE-2023-49566	—	—	Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability	Jul 15, 2024 1y ago
CVE-2023-46801	—	—	Apache Linkis DataSource: DataSource Remote code execution vulnerability	Jul 15, 2024 1y ago
CVE-2023-41916	—	—	Apache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file reading	Jul 15, 2024 1y ago
CVE-2024-36522	—	—	Apache Wicket: Remote code execution via XSLT injection	Jul 12, 2024 1y ago
CVE-2024-37389	medium	4.6/10	Apache NiFi: Improper Neutralization of Input in Parameter Context Description	Jul 8, 2024 1y ago
CVE-2024-38346	—	—	Apache CloudStack: Unauthenticated cluster service port leads to remote execution	Jul 5, 2024 1y ago
CVE-2024-39864	—	—	Apache CloudStack: Integration API service uses dynamic port when disabled	Jul 5, 2024 1y ago
CVE-2024-39884	—	—	Apache HTTP Server: source code disclosure with handlers configured via AddType	Jul 4, 2024 1y ago
CVE-2024-34750	—	—	Apache Tomcat: HTTP/2 excess header handling DoS	Jul 3, 2024 1y ago
CVE-2024-39573	—	—	Apache HTTP Server: mod_rewrite proxy handler substitution	Jul 1, 2024 1y ago
CVE-2024-38477	—	—	Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request	Jul 1, 2024 1y ago
CVE-2024-38476	—	—	Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect	Jul 1, 2024 1y ago
CVE-2024-38475	—	—	Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.	Jul 1, 2024 1y ago
CVE-2024-38474	—	—	Apache HTTP Server weakness with encoded question marks in backreferences	Jul 1, 2024 1y ago
CVE-2024-38473	—	—	Apache HTTP Server proxy encoding problem	Jul 1, 2024 1y ago
CVE-2024-38472	—	—	Apache HTTP Server on WIndows UNC SSRF	Jul 1, 2024 1y ago
CVE-2024-36387	—	—	Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2	Jul 1, 2024 1y ago