Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,508

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

701

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 811–840 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-46749	—	—	Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting	Jan 15, 2024 2y ago
CVE-2023-50290	—	—	Apache Solr: Host environment variables are published via the Metrics API	Jan 15, 2024 2y ago
CVE-2023-49619	—	—	Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.	Jan 10, 2024 2y ago
CVE-2023-51441	—	—	Apache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API	Jan 6, 2024 2y ago
CVE-2023-51784	—	—	Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager	Jan 3, 2024 2y ago
CVE-2023-51785	—	—	Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager	Jan 3, 2024 2y ago
CVE-2023-49299	—	—	Apache DolphinScheduler: Arbitrary js execute as root for authenticated users	Dec 30, 2023 2y ago
CVE-2023-47804	—	—	Apache OpenOffice: Macro URL arbitrary script execution	Dec 29, 2023 2y ago
CVE-2023-51467	—	—	Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability	Dec 26, 2023 2y ago
CVE-2023-50968	—	—	Apache OFBiz: Arbitrary file properties reading and SSRF attack	Dec 26, 2023 2y ago
CVE-2023-51656	—	—	Apache IoTDB: Unsafe deserialize map in Sync Tool	Dec 21, 2023 2y ago
CVE-2023-48291	—	—	Apache Airflow: Improper access control to DAG resources	Dec 21, 2023 2y ago
CVE-2023-50783	—	—	Apache Airflow: Improper access control vulnerability on the "varimport" endpoint	Dec 21, 2023 2y ago
CVE-2023-47265	—	—	Apache Airflow: DAG Params alllow to embed unchecked Javascript	Dec 21, 2023 2y ago
CVE-2023-49920	—	—	Apache Airflow: Missing CSRF protection on DAG/trigger	Dec 21, 2023 2y ago
CVE-2023-37544	high	7.5/10	Apache Pulsar WebSocket Proxy: Improper Authentication for WebSocket Proxy Endpoint Allows DoS	Dec 20, 2023 2y ago
CVE-2023-43826	high	7.5/10	Apache Guacamole: Integer overflow in handling of VNC image buffers	Dec 19, 2023 2y ago
CVE-2023-49734	high	7.7/10	Apache Superset: Privilege Escalation Vulnerability	Dec 19, 2023 2y ago
CVE-2023-49736	medium	6.5/10	Apache Superset: SQL Injection on where_in JINJA macro	Dec 19, 2023 2y ago
CVE-2023-46104	medium	6.5/10	Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb	Dec 19, 2023 2y ago
CVE-2023-41314	—	—	Apache Doris: Missing API authentication allowed DoS	Dec 18, 2023 2y ago
CVE-2023-30867	—	—	Apache StreamPark (incubating): Authenticated system users could trigger SQL injection vulnerability	Dec 15, 2023 2y ago
CVE-2023-49898	—	—	Apache StreamPark (incubating): Authenticated system users could trigger remote command execution	Dec 15, 2023 2y ago
CVE-2023-46279	—	—	Apache Dubbo: Bypass deny serialize list check in Apache Dubbo	Dec 15, 2023 2y ago
CVE-2023-29234	—	—	Bypass serialize checks in Apache Dubbo	Dec 15, 2023 2y ago
CVE-2023-46750	—	—	Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro.	Dec 14, 2023 2y ago
CVE-2023-45725	—	—	Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents	Dec 13, 2023 2y ago
CVE-2023-50164	—	—	Apache Struts: File upload component had a directory traversal vulnerability	Dec 7, 2023 2y ago
CVE-2023-41835	—	—	Apache Struts: excessive disk usage	Dec 5, 2023 2y ago
CVE-2023-49070	—	—	Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present	Dec 5, 2023 2y ago