Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

6 hrs ago

Data freshness

Showing 691–720 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-29868	—	—	Apache StreamPipes, Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation	Jun 24, 2024 2y ago
CVE-2024-27136	—	—	Apache JSPWiki: Cross-site scripting vulnerability on upload page	Jun 24, 2024 2y ago
CVE-2024-38379	—	—	Apache Allura: Stored authenticated XSS	Jun 22, 2024 2y ago
CVE-2024-34693	medium	6.8/10	Apache Superset: Server arbitrary file read	Jun 20, 2024 2y ago
CVE-2024-25142	—	—	Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache	Jun 14, 2024 2y ago
CVE-2024-36265	—	—	Apache Submarine Server Core: authorization bypass	Jun 12, 2024 2y ago
CVE-2024-36264	—	—	Apache Submarine Commons Utils: default secret	Jun 12, 2024 2y ago
CVE-2024-36263	—	—	Apache Submarine Server Core: SQL injection	Jun 12, 2024 2y ago
CVE-2024-36471	—	—	Apache Allura: sensitive information exposure via DNS rebinding	Jun 10, 2024 2y ago
CVE-2024-36104	—	—	Apache OFBiz: Path traversal leading to a RCE	Jun 4, 2024 2y ago
CVE-2024-32077	—	—	Apache Airflow: XSS vulnerability in Task Instance Log/Log Details	May 14, 2024 2y ago
CVE-2024-34365	—	—	Apache Karaf Cave: Cave SSRF and arbitrary file access	May 9, 2024 2y ago
CVE-2024-26579	—	—	Apache Inlong JDBC Vulnerability	May 8, 2024 2y ago
CVE-2024-32113	—	—	Apache OFBiz: Path traversal leading to RCE	May 8, 2024 2y ago
CVE-2024-28148	medium	4.3/10	Apache Superset: Incorrect datasource authorization on explore REST API	May 7, 2024 2y ago
CVE-2023-35701	—	—	Apache Hive: Arbitrary command execution via JDBC driver	May 3, 2024 2y ago
CVE-2024-32638	—	—	Apache APISIX: Forward-Auth Request Smuggling	May 2, 2024 2y ago
CVE-2024-32114	high	8.5/10	Apache ActiveMQ: Jolokia and REST API were not secured with default configuration	May 2, 2024 2y ago
CVE-2024-27349	—	—	Apache HugeGraph-Server: Bypass whitelist in Auth mode	Apr 22, 2024 2y ago
CVE-2024-27348	—	—	Apache HugeGraph-Server: Command execution in gremlin	Apr 22, 2024 2y ago
CVE-2024-27347	—	—	Apache HugeGraph-Hubble: SSRF in Hubble connection page	Apr 22, 2024 2y ago
CVE-2024-29733	—	—	Apache Airflow FTP Provider: FTP_TLS instance with unverified SSL context	Apr 21, 2024 2y ago
CVE-2024-29217	—	—	Apache Answer: XSS vulnerability when changing personal website	Apr 21, 2024 2y ago
CVE-2024-31869	—	—	Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used	Apr 18, 2024 2y ago
CVE-2024-31391	—	—	Apache Solr Operator: Solr-Operator liveness and readiness probes may leak basic auth credentials	Apr 12, 2024 2y ago
CVE-2024-27309	—	—	Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode	Apr 12, 2024 2y ago
CVE-2024-31309	—	—	Apache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attack	Apr 10, 2024 2y ago
CVE-2024-31867	—	—	Apache Zeppelin: LDAP search filter query Injection Vulnerability	Apr 9, 2024 2y ago
CVE-2024-31868	—	—	Apache Zeppelin: XSS vulnerability in the helium module	Apr 9, 2024 2y ago
CVE-2024-31866	—	—	Apache Zeppelin: Interpreter download command does not escape malicious code injection	Apr 9, 2024 2y ago