Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,709

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 811–840 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-45627	—	—	Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability	Jan 14, 2025 1y ago
CVE-2025-22828	—	—	Apache CloudStack: Unauthorised access to annotations	Jan 13, 2025 1y ago
CVE-2024-45033	—	—	Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli	Jan 8, 2025 1y ago
CVE-2024-54676	—	—	Apache OpenMeetings: Deserialisation of untrusted data in cluster mode	Jan 8, 2025 1y ago
CVE-2024-56512	low	2.1/10	Apache NiFi: Missing Complete Authorization for Parameter and Service References	Dec 28, 2024 1y ago
CVE-2024-52046	critical	10.0/10	Apache MINA: MINA applications using unbounded deserialization may allow RCE	Dec 25, 2024 1y ago
CVE-2024-43441	—	—	Apache HugeGraph-Server: Fixed JWT Token(Secret)	Dec 24, 2024 1y ago
CVE-2024-45387	critical	9.9/10	Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments	Dec 23, 2024 1y ago
CVE-2024-23945	—	—	Apache Hive, Apache Spark, Apache Spark: CookieSigner exposes the correct signature when message verification fails	Dec 23, 2024 1y ago
CVE-2024-56337	—	—	Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete	Dec 20, 2024 1y ago
CVE-2024-56128	—	—	Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption	Dec 18, 2024 1y ago
CVE-2024-54677	—	—	Apache Tomcat: DoS in examples web application	Dec 17, 2024 1y ago
CVE-2024-50379	—	—	Apache Tomcat: RCE due to TOCTOU issue in JSP compilation	Dec 17, 2024 1y ago
CVE-2024-55633	high	7.1/10	Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	Dec 12, 2024 1y ago
CVE-2024-53677	critical	9.5/10	Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks	Dec 11, 2024 1y ago
CVE-2024-53949	high	7.6/10	Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled	Dec 9, 2024 1y ago
CVE-2024-53948	medium	5.3/10	Apache Superset: Error verbosity exposes metadata in analytics databases	Dec 9, 2024 1y ago
CVE-2024-53947	low	2.3/10	Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions	Dec 9, 2024 1y ago
CVE-2024-46901	low	3.1/10	Apache Subversion: mod_dav_svn denial-of-service via control characters in paths	Dec 9, 2024 1y ago
CVE-2022-41137	—	—	Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore	Dec 5, 2024 1y ago
CVE-2024-45106	—	—	Apache Ozone: Improper authentication when generating S3 secrets	Dec 3, 2024 1y ago
CVE-2024-52338	—	—	Apache Arrow R package: Arbitrary code execution when loading a malicious data file	Nov 28, 2024 1y ago
CVE-2024-51569	—	—	Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler	Nov 26, 2024 1y ago
CVE-2024-47250	—	—	Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access	Nov 26, 2024 1y ago
CVE-2024-47249	—	—	Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler	Nov 26, 2024 1y ago
CVE-2024-47248	—	—	Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack	Nov 26, 2024 1y ago
CVE-2024-45719	—	—	Apache Answer: Predictable Authorization Token Using UUIDv1	Nov 22, 2024 1y ago
CVE-2024-52067	medium	6.9/10	Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log	Nov 21, 2024 1y ago
CVE-2024-31141	—	—	Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider	Nov 19, 2024 1y ago
CVE-2024-52318	—	—	Apache Tomcat: Incorrect JSP tag recycling leads to XSS	Nov 18, 2024 1y ago