Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,508

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

702

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 781–810 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-22393	—	—	Apache Answer: Pixel Flood Attack by uploading the large pixel file	Feb 22, 2024 2y ago
CVE-2024-23349	—	—	Apache Answer: XSS vulnerability when submitting summary	Feb 22, 2024 2y ago
CVE-2024-26578	—	—	Apache Answer: Repeated submission at registration created duplicate users with the same name	Feb 22, 2024 2y ago
CVE-2024-25141	—	—	Apache Airflow Mongo Provider: Certificate validation isn't respected even if SSL is enabled for apache-airflow-providers-mongo	Feb 20, 2024 2y ago
CVE-2024-23114	—	—	Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository	Feb 20, 2024 2y ago
CVE-2024-22369	—	—	Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository	Feb 20, 2024 2y ago
CVE-2023-51770	—	—	Apache DolphinScheduler: Arbitrary File Read Vulnerability	Feb 20, 2024 2y ago
CVE-2023-50270	—	—	Apache DolphinScheduler: Session do not expire after password change	Feb 20, 2024 2y ago
CVE-2023-49250	—	—	Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil	Feb 20, 2024 2y ago
CVE-2023-49109	—	—	Remote Code Execution in Apache Dolphinscheduler	Feb 20, 2024 2y ago
CVE-2024-25710	high	8.1/10	Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file	Feb 19, 2024 2y ago
CVE-2024-26308	—	—	Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file	Feb 19, 2024 2y ago
CVE-2024-23952	medium	6.5/10	Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (version range fix for CVE-2023-46104)	Feb 14, 2024 2y ago
CVE-2023-50291	—	—	Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords	Feb 9, 2024 2y ago
CVE-2023-50292	—	—	Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users	Feb 9, 2024 2y ago
CVE-2023-50298	—	—	Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions	Feb 9, 2024 2y ago
CVE-2023-50386	—	—	Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets	Feb 9, 2024 2y ago
CVE-2024-23452	—	—	Apache bRPC: HTTP request smuggling vulnerability	Feb 8, 2024 2y ago
CVE-2023-39196	medium	5.3/10	Apache Ozone: Missing mutual TLS authentication in one of the service internal Ozone Storage Container Manager endpoints	Feb 7, 2024 2y ago
CVE-2023-51437	high	7.4/10	Apache Pulsar: Timing attack in SASL token signature verification	Feb 7, 2024 2y ago
CVE-2024-23673	high	8.5/10	Apache Sling Servlets Resolver: Malicious code execution via path traversal	Feb 6, 2024 2y ago
CVE-2023-44313	high	7.6/10	Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API	Jan 31, 2024 2y ago
CVE-2023-44312	medium	5.8/10	Apache ServiceComb Service-Center: attacker can query all environment variables of the service-center server	Jan 31, 2024 2y ago
CVE-2023-29055	—	—	Apache Kylin: Insufficiently protected credentials in config file	Jan 29, 2024 2y ago
CVE-2023-50944	—	—	Apache Airflow: Bypass permission verification to read code of other dags	Jan 24, 2024 2y ago
CVE-2023-50943	—	—	Apache Airflow: Potential pickle deserialization vulnerability in XComs	Jan 24, 2024 2y ago
CVE-2023-51702	—	—	Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service	Jan 24, 2024 2y ago
CVE-2023-49657	critical	9.6/10	Apache Superset: Stored XSS in Dashboard Title and Chart Title	Jan 23, 2024 2y ago
CVE-2024-21733	—	—	Apache Tomcat: Leaking of unrelated request bodies in default error page	Jan 19, 2024 2y ago
CVE-2023-46226	—	—	Apache IoTDB: Remote Code Execution (RCE) risk via the UDF	Jan 15, 2024 2y ago