Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,709

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 841–870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-52317	—	—	Apache Tomcat: Request/response mix-up with HTTP/2	Nov 18, 2024 1y ago
CVE-2024-52316	—	—	Apache Tomcat: Authentication bypass when using Jakarta Authentication API	Nov 18, 2024 1y ago
CVE-2024-41151	—	—	Apache HertzBeat: RCE by notice template injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-45791	—	—	Apache HertzBeat: Exposure sensitive token via http GET method with query string	Nov 18, 2024 1y ago
CVE-2024-45505	—	—	Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities	Nov 18, 2024 1y ago
CVE-2024-47208	—	—	Apache OFBiz: URLs allowing remote use of Groovy expressions, leading to RCE	Nov 18, 2024 1y ago
CVE-2024-48962	high	8.9/10	Apache OFBiz: Bypass SameSite restrictions with target redirection using URL parameters (SSTI and CSRF leading to RCE)	Nov 18, 2024 1y ago
CVE-2024-45784	—	—	Apache Airflow: Sensitive configuration values are not masked in the logs by default	Nov 15, 2024 1y ago
CVE-2024-50306	—	—	Apache Traffic Server: Server process can fail to drop privilege	Nov 14, 2024 1y ago
CVE-2024-50305	—	—	Apache Traffic Server: Valid Host field value can cause crashes	Nov 14, 2024 1y ago
CVE-2024-38479	—	—	Apache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack	Nov 14, 2024 1y ago
CVE-2024-50386	high	8.5/10	Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure	Nov 12, 2024 1y ago
CVE-2024-50378	—	—	Apache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cli	Nov 8, 2024 1y ago
CVE-2024-51504	—	—	Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server	Nov 7, 2024 1y ago
CVE-2024-38286	high	8.6/10	Apache Tomcat: Denial of Service	Nov 7, 2024 1y ago
CVE-2024-23590	—	—	Apache Kylin: Session fixation in web interface	Nov 4, 2024 1y ago
CVE-2024-43383	high	8.0/10	Apache Lucene.Net.Replicator: Remote Code Execution in Lucene.Net.Replicator	Oct 31, 2024 1y ago
CVE-2024-45477	medium	4.6/10	Apache NiFi: Improper Neutralization of Input in Parameter Description	Oct 29, 2024 1y ago
CVE-2024-45031	—	—	Apache Syncope: Stored XSS in Console and Enduser	Oct 24, 2024 1y ago
CVE-2024-45219	high	8.5/10	Apache CloudStack: Uploaded and registered templates and volumes can be used to abuse KVM-based infrastructure	Oct 16, 2024 1y ago
CVE-2024-45461	medium	5.7/10	Apache CloudStack Quota plugin: Access checks not enforced in Quota	Oct 16, 2024 1y ago
CVE-2024-45462	medium	6.3/10	Apache CloudStack: Incomplete session invalidation on web interface logout	Oct 16, 2024 1y ago
CVE-2024-45693	high	8.0/10	Apache CloudStack: Request origin validation bypass makes account takeover possible	Oct 16, 2024 1y ago
CVE-2024-45217	—	—	Apache Solr: ConfigSets created during a backup restore command are trusted implicitly	Oct 16, 2024 1y ago
CVE-2024-45216	—	—	Apache Solr: Authentication bypass possible using a fake URL Path ending	Oct 16, 2024 1y ago
CVE-2023-50780	—	—	Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans	Oct 14, 2024 1y ago
CVE-2024-46911	—	—	Apache Roller: Weakness in CSRF protection allows privilege escalation	Oct 14, 2024 1y ago
CVE-2024-45720	high	8.2/10	Apache Subversion: Command line argument injection on Windows platforms	Oct 9, 2024 1y ago
CVE-2024-28168	—	—	Apache XML Graphics FOP: XML External Entity (XXE) Processing	Oct 9, 2024 1y ago
CVE-2024-47554	—	—	Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader	Oct 3, 2024 1y ago