Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,009

All time

Critical · Active

12,076

CVSS ≥ 9.0

New · 14 days

2,674

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 691–720 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-54656	—	—	Apache Struts Extras: Improper Output Neutralization for Logs	Jul 30, 2025 1y ago
CVE-2025-54090	—	—	Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64	Jul 23, 2025 1y ago
CVE-2025-50151	—	—	Apache Jena: Configuration files uploaded by administrative users are not check properly	Jul 21, 2025 1y ago
CVE-2025-49656	—	—	Apache Jena: Administrative users can create files outside the server directory space via the admin UI	Jul 21, 2025 1y ago
CVE-2025-54064	medium	6.9/10	rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles	Jul 17, 2025 1y ago
CVE-2025-48795	—	—	Apache CXF: Denial of Service and sensitive data exposure in logs	Jul 15, 2025 1y ago
CVE-2025-53689	—	—	Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons	Jul 14, 2025 1y ago
CVE-2024-41169	—	—	Apache Zeppelin: raft directory listing and file read	Jul 12, 2025 1y ago
CVE-2025-48924	—	—	Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs	Jul 11, 2025 1y ago
CVE-2025-53506	—	—	Apache Tomcat: DoS via excessive h2 streams at connection start	Jul 10, 2025 1y ago
CVE-2025-52520	—	—	Apache Tomcat: DoS via integer overflow in multipart file upload	Jul 10, 2025 1y ago
CVE-2025-52434	—	—	Apache Tomcat: APR/Native Connector crash leading to DoS	Jul 10, 2025 1y ago
CVE-2025-53020	—	—	Apache HTTP Server: HTTP/2 DoS by Memory Increase	Jul 10, 2025 1y ago
CVE-2025-49812	—	—	Apache HTTP Server: mod_ssl TLS upgrade attack	Jul 10, 2025 1y ago
CVE-2025-49630	—	—	Apache HTTP Server: mod_proxy_http2 denial of service	Jul 10, 2025 1y ago
CVE-2025-23048	—	—	Apache HTTP Server: mod_ssl access control bypass with session resumption	Jul 10, 2025 1y ago
CVE-2024-43394	—	—	Apache HTTP Server: SSRF on Windows due to UNC paths	Jul 10, 2025 1y ago
CVE-2024-47252	—	—	Apache HTTP Server: mod_ssl error log variable escaping	Jul 10, 2025 1y ago
CVE-2024-43204	—	—	Apache HTTP Server: SSRF with mod_headers setting Content-Type header	Jul 10, 2025 1y ago
CVE-2024-42516	—	—	Apache HTTP Server: HTTP response splitting	Jul 10, 2025 1y ago
CVE-2024-35164	medium	6.8/10	Apache Guacamole: Improper input validation of console codes	Jul 2, 2025 1y ago
CVE-2025-46647	—	—	Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect	Jul 2, 2025 1y ago
CVE-2025-32897	—	—	Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server	Jun 28, 2025 1y ago
CVE-2025-50213	—	—	Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator	Jun 24, 2025 1y ago
CVE-2025-32896	—	—	Apache SeaTunnel: Unauthenticated insecure access	Jun 19, 2025 1y ago
CVE-2025-31698	—	—	Apache Traffic Server: Client IP address from PROXY protocol is not used for ACL	Jun 19, 2025 1y ago
CVE-2025-49763	—	—	Apache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin	Jun 19, 2025 1y ago
CVE-2025-48976	—	—	Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers	Jun 16, 2025 1y ago
CVE-2025-49124	—	—	Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows	Jun 16, 2025 1y ago
CVE-2025-49125	—	—	Apache Tomcat: Security constraint bypass for pre/post-resources	Jun 16, 2025 1y ago