Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

695

Newly disclosed

Feed last synced

9 hrs ago

Data freshness

Showing 751–780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-27894	high	8.5/10	Apache Pulsar: Pulsar Functions Worker Allows Unauthorized File Access and Unauthorized HTTP/HTTPS Proxying	Mar 12, 2024 2y ago
CVE-2024-27317	high	8.4/10	Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification	Mar 12, 2024 2y ago
CVE-2024-27135	high	8.5/10	Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution	Mar 12, 2024 2y ago
CVE-2022-34321	high	8.2/10	Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint	Mar 12, 2024 2y ago
CVE-2024-28098	medium	6.4/10	Apache Pulsar: Improper Authorization For Topic-Level Policy Management	Mar 12, 2024 2y ago
CVE-2023-41313	—	—	Apache Doris: Timing Attack weakness	Mar 12, 2024 2y ago
CVE-2023-50740	—	—	Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged	Mar 6, 2024 2y ago
CVE-2024-26580	—	—	Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability	Mar 6, 2024 2y ago
CVE-2024-27138	—	—	Apache Archiva: disabling user registration is not effective	Mar 1, 2024 2y ago
CVE-2024-27139	—	—	Apache Archiva: incorrect authentication potentially leading to account takeover	Mar 1, 2024 2y ago
CVE-2024-27140	—	—	Apache Archiva: reflected XSS	Mar 1, 2024 2y ago
CVE-2023-50378	—	—	Apache Ambari: Various XSS problems	Mar 1, 2024 2y ago
CVE-2024-26280	—	—	Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)	Mar 1, 2024 2y ago
CVE-2024-27906	—	—	Apache Airflow: Dag Code and Import Error Permissions Ignored	Feb 29, 2024 2y ago
CVE-2024-23946	—	—	Apache OFBiz: Path traversal or file inclusion	Feb 28, 2024 2y ago
CVE-2024-25065	—	—	Apache OFBiz: Path traversal allowing authentication bypass.	Feb 28, 2024 2y ago
CVE-2024-23807	—	—	Apache Xerces C++: Use-after-free on external DTD scan	Feb 28, 2024 2y ago
CVE-2024-26016	medium	4.3/10	Apache Superset: Improper authorization validation on dashboards and charts import	Feb 28, 2024 2y ago
CVE-2024-24779	medium	5.0/10	Apache Superset: Improper data authorization when creating a new dataset	Feb 28, 2024 2y ago
CVE-2024-24772	medium	4.3/10	Apache Superset: Improper Neutralisation of custom SQL on embedded context	Feb 28, 2024 2y ago
CVE-2024-24773	medium	4.9/10	Apache Superset: Improper validation of SQL statements allows for unauthorized access to data	Feb 28, 2024 2y ago
CVE-2024-27315	medium	4.3/10	Apache Superset: Improper error handling on alerts	Feb 28, 2024 2y ago
CVE-2023-50380	—	—	Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server	Feb 27, 2024 2y ago
CVE-2024-21742	—	—	Apache James Mime4J: Mime4J DOM header injection	Feb 27, 2024 2y ago
CVE-2024-27905	—	—	Apache Aurora: padding oracle can allow construction an authentication cookie	Feb 27, 2024 2y ago
CVE-2023-51747	—	—	SMTP smuggling in Apache James	Feb 27, 2024 2y ago
CVE-2023-51518	—	—	Apache James server: Privilege escalation via JMX pre-authentication deserialisation	Feb 27, 2024 2y ago
CVE-2023-50379	—	—	Apache Ambari: authenticated users could perform command injection to perform RCE	Feb 27, 2024 2y ago
CVE-2024-22371	low	2.9/10	Apache Camel issue on ExchangeCreatedEvent	Feb 26, 2024 2y ago
CVE-2024-23320	—	—	Apache DolphinScheduler: Arbitrary js execution as root for authenticated users	Feb 23, 2024 2y ago