Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,009

All time

Critical · Active

12,076

CVSS ≥ 9.0

New · 14 days

2,674

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-48988	—	—	Apache Tomcat: FileUpload large number of parts with headers DoS	Jun 16, 2025 1y ago
CVE-2025-47869	—	—	Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.	Jun 16, 2025 1y ago
CVE-2025-47868	—	—	Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.	Jun 16, 2025 1y ago
CVE-2025-30675	medium	4.7/10	Apache CloudStack: Unauthorised template/ISO list access to the domain/resource admins	Jun 10, 2025 1y ago
CVE-2025-22829	low	2.3/10	Apache CloudStack: Unauthorised access to dedicated resources in Quota plugin	Jun 10, 2025 1y ago
CVE-2025-26521	—	—	Apache CloudStack: CKS cluster in project exposes user API keys	Jun 10, 2025 1y ago
CVE-2025-47849	—	—	Apache CloudStack: Insecure access of user's API/Secret Keys in the same domain	Jun 10, 2025 1y ago
CVE-2025-47713	—	—	Apache CloudStack: Domain Admin can reset Admin password in Root Domain	Jun 10, 2025 1y ago
CVE-2025-27817	—	—	Apache Kafka Client: Arbitrary file read and SSRF vulnerability	Jun 10, 2025 1y ago
CVE-2025-27819	—	—	Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration	Jun 10, 2025 1y ago
CVE-2025-27818	—	—	Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration	Jun 10, 2025 1y ago
CVE-2025-46548	—	—	Apache Pekko Management, Apache Pekko Management, Apache Pekko Management, Akka Management, Akka Management, Akka Management: management API basic authentication is not effective	Jun 3, 2025 1y ago
CVE-2025-48912	high	7.1/10	Apache Superset: Improper authorization bypass on row level security via SQL Injection	May 30, 2025 1y ago
CVE-2025-46701	—	—	Apache Tomcat: Security constraint bypass for CGI scripts	May 29, 2025 1y ago
CVE-2025-48734	—	—	Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default	May 28, 2025 1y ago
CVE-2025-35003	—	—	Apache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.	May 26, 2025 1y ago
CVE-2025-47436	medium	6.0/10	Apache ORC: Potential Heap Buffer Overflow during C++ LZO Decompression	May 14, 2025 1y ago
CVE-2025-26864	—	—	Apache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication	May 14, 2025 1y ago
CVE-2025-26795	—	—	Apache IoTDB JDBC driver: Exposure of Sensitive Information in IoTDB JDBC driver	May 14, 2025 1y ago
CVE-2024-24780	—	—	Apache IoTDB: Remote Code Execution with untrusted URI of User-defined function	May 14, 2025 1y ago
CVE-2025-27696	medium	5.3/10	Apache Superset: Incorrect authorization leading to resource ownership takeover	May 13, 2025 1y ago
CVE-2025-46392	—	—	Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x	May 9, 2025 1y ago
CVE-2025-46762	high	7.1/10	Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata	May 6, 2025 1y ago
CVE-2025-31651	—	—	Apache Tomcat: Bypass of rules in Rewrite Valve	Apr 28, 2025 1y ago
CVE-2025-31650	—	—	Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame	Apr 28, 2025 1y ago
CVE-2025-27820	—	—	Apache HttpComponents: PSL (Public Suffix List) validation bypass	Apr 24, 2025 1y ago
CVE-2025-26413	—	—	Apache Kvrocks: The server was crashed by the negative offset	Apr 22, 2025 1y ago
CVE-2025-29953	—	—	Apache ActiveMQ NMS OpenWire Client: deserialization allowlist bypass	Apr 18, 2025 1y ago
CVE-2025-3790	medium	6.9/10	baseweb JSite Apache Druid Monitoring Console index.html access control	Apr 18, 2025 1y ago
CVE-2024-56736	—	—	Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss	Apr 16, 2025 1y ago