Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

695

Newly disclosed

Feed last synced

8 hrs ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-31865	—	—	Apache Zeppelin: Cron arbitrary user impersonation with improper privileges	Apr 9, 2024 2y ago
CVE-2024-31864	—	—	Apache Zeppelin: Remote code execution by adding malicious JDBC connection string	Apr 9, 2024 2y ago
CVE-2024-31863	—	—	Apache Zeppelin: Replacing other users notebook, bypassing any permissions	Apr 9, 2024 2y ago
CVE-2024-31862	—	—	Apache Zeppelin: Denial of service with invalid notebook name	Apr 9, 2024 2y ago
CVE-2022-47894	—	—	Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE	Apr 9, 2024 2y ago
CVE-2021-28656	—	—	Apache Zeppelin: CSRF vulnerability in the Credentials page	Apr 9, 2024 2y ago
CVE-2024-31860	—	—	Apache Zeppelin: Path traversal vulnerability	Apr 9, 2024 2y ago
CVE-2024-24746	—	—	Apache NimBLE: Denial of service in NimBLE Bluetooth stack	Apr 6, 2024 2y ago
CVE-2024-27316	—	—	Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames	Apr 4, 2024 2y ago
CVE-2024-24795	—	—	Apache HTTP Server: HTTP Response Splitting in multiple modules	Apr 4, 2024 2y ago
CVE-2023-38709	—	—	Apache HTTP Server: HTTP response splitting	Apr 4, 2024 2y ago
CVE-2024-29008	—	—	Apache CloudStack: The extraconfig feature can be abused to load hypervisor resources on a VM instance	Apr 4, 2024 2y ago
CVE-2024-29007	—	—	Apache CloudStack: When downloading templates or ISOs, the management server and SSVM follow HTTP redirects with potentially dangerous consequences	Apr 4, 2024 2y ago
CVE-2024-29006	—	—	Apache CloudStack: x-forwarded-for HTTP header parsed by default	Apr 4, 2024 2y ago
CVE-2024-29834	medium	6.4/10	Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints	Apr 2, 2024 2y ago
CVE-2024-23537	high	8.4/10	Apache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permissions, to escalate their privileges to any role.	Mar 29, 2024 2y ago
CVE-2024-23538	critical	9.9/10	Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.	Mar 29, 2024 2y ago
CVE-2024-23539	high	8.3/10	Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.	Mar 29, 2024 2y ago
CVE-2024-29735	—	—	Apache Airflow: Potentially harmful permission changing by log task handler	Mar 26, 2024 2y ago
CVE-2024-27438	—	—	Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution	Mar 21, 2024 2y ago
CVE-2024-26307	—	—	Apache Doris: Possible race condition	Mar 21, 2024 2y ago
CVE-2024-29131	—	—	Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()	Mar 21, 2024 2y ago
CVE-2024-29133	—	—	Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree	Mar 21, 2024 2y ago
CVE-2024-27439	—	—	Apache Wicket: Possible bypass of CSRF protection	Mar 19, 2024 2y ago
CVE-2024-24683	—	—	Apache Hop Engine: ID isn't escaped when generating HTML	Mar 19, 2024 2y ago
CVE-2024-28752	—	—	Apache CXF SSRF Vulnerability using the Aegis databinding	Mar 15, 2024 2y ago
CVE-2024-23944	—	—	Apache ZooKeeper: Information disclosure in persistent watcher handling	Mar 15, 2024 2y ago
CVE-2024-28746	—	—	Apache Airflow: Ignored Airflow Permissions	Mar 14, 2024 2y ago
CVE-2024-23672	—	—	Apache Tomcat: WebSocket DoS with incomplete closing handshake	Mar 13, 2024 2y ago
CVE-2024-24549	—	—	Apache Tomcat: HTTP/2 header handling DoS	Mar 13, 2024 2y ago