Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,009

All time

Critical · Active

12,076

CVSS ≥ 9.0

New · 14 days

2,669

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 781–810 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-56196	—	—	Apache Traffic Server: ACL is not fully compatible with older versions	Mar 6, 2025 1y ago
CVE-2024-56202	—	—	Apache Traffic Server: Expect header field can unreasonably retain resource	Mar 6, 2025 1y ago
CVE-2024-55532	—	—	Apache Ranger: Improper Neutralization of Formula Elements in a CSV File	Mar 3, 2025 1y ago
CVE-2024-24778	—	—	Apache StreamPipes: Resources Permission Escalation	Mar 3, 2025 1y ago
CVE-2025-1075	medium	5.6/10	LDAP credentials logged to Apache error log	Feb 19, 2025 1y ago
CVE-2024-56180	—	—	Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution	Feb 14, 2025 1y ago
CVE-2024-52577	critical	9.5/10	Apache Ignite: Possible RCE when deserializing incoming messages by the server node	Feb 14, 2025 1y ago
CVE-2024-46910	—	—	Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user	Feb 13, 2025 1y ago
CVE-2024-32838	critical	9.4/10	Apache Fineract: SQL injection vulnerabilities in offices API endpoint	Feb 12, 2025 1y ago
CVE-2025-25247	—	—	Apache Felix Webconsole: XSS in services console	Feb 10, 2025 1y ago
CVE-2025-25069	—	—	Apache Kvrocks: Cross-Protocol Scripting Vulnerability	Feb 7, 2025 1y ago
CVE-2022-31764	—	—	Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC	Feb 6, 2025 1y ago
CVE-2024-37358	high	8.6/10	Apache James: denial of service through the use of IMAP literals	Feb 6, 2025 1y ago
CVE-2024-45626	medium	6.5/10	Apache James: denial of service through JMAP HTML to text conversion	Feb 6, 2025 1y ago
CVE-2024-48019	—	—	Apache Doris: allows admin users to read arbitrary files through the REST API	Feb 4, 2025 1y ago
CVE-2024-27137	—	—	Apache Cassandra: unrestricted deserialization of JMX authentication credentials	Feb 4, 2025 1y ago
CVE-2025-24860	—	—	Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions	Feb 4, 2025 1y ago
CVE-2025-23015	—	—	Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions	Feb 4, 2025 1y ago
CVE-2024-29869	—	—	Apache Hive: Credentials file created with non restrictive permissions	Jan 28, 2025 1y ago
CVE-2024-23953	—	—	Apache Hive: Timing Attack Against Signature in LLAP util	Jan 28, 2025 1y ago
CVE-2025-24783	—	—	Apache Cocoon: continuations may not be private	Jan 27, 2025 1y ago
CVE-2025-24814	—	—	Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files	Jan 27, 2025 1y ago
CVE-2024-52012	—	—	Apache Solr: Configset upload on Windows allows arbitrary path write-access	Jan 27, 2025 1y ago
CVE-2024-53299	—	—	Apache Wicket: An attacker can intentionally trigger a memory leak	Jan 23, 2025 1y ago
CVE-2024-45479	—	—	Apache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost	Jan 21, 2025 1y ago
CVE-2024-45478	—	—	Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input	Jan 21, 2025 1y ago
CVE-2024-51941	—	—	Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts	Jan 21, 2025 1y ago
CVE-2025-23196	—	—	Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition	Jan 21, 2025 1y ago
CVE-2025-23195	—	—	Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie	Jan 21, 2025 1y ago
CVE-2025-23184	medium	5.9/10	Apache CXF: Denial of Service vulnerability with temporary files	Jan 21, 2025 1y ago