Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,509

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

698

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 841–870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-49735	—	—	Apache Tiles: Unvalidated input may lead to path traversal and XXE	Nov 30, 2023 2y ago
CVE-2023-49733	—	—	Apache Cocoon's StreamGenerator is vulnerable to XXE injection	Nov 30, 2023 2y ago
CVE-2023-49620	—	—	Apache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for	Nov 30, 2023 2y ago
CVE-2022-45135	—	—	Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction	Nov 30, 2023 2y ago
CVE-2023-42504	medium	5.8/10	Apache Superset: Lack of rate limiting allows for possible denial of service	Nov 28, 2023 2y ago
CVE-2023-42505	medium	4.3/10	Apache Superset: Sensitive information disclosure on db connection details	Nov 28, 2023 2y ago
CVE-2023-42502	medium	4.8/10	Apache Superset: Open Redirect Vulnerability	Nov 28, 2023 2y ago
CVE-2023-46589	—	—	Apache Tomcat: HTTP request smuggling via malformed trailer headers	Nov 28, 2023 2y ago
CVE-2022-41678	—	—	Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE	Nov 28, 2023 2y ago
CVE-2023-49145	high	7.9/10	Apache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt	Nov 27, 2023 2y ago
CVE-2023-43701	medium	4.3/10	Apache Superset: Stored XSS on API endpoint	Nov 27, 2023 2y ago
CVE-2023-42501	medium	4.3/10	Apache Superset: Unnecessary read permissions within the Gamma role	Nov 27, 2023 2y ago
CVE-2023-40610	medium	6.3/10	Apache Superset: Privilege escalation with default examples database	Nov 27, 2023 2y ago
CVE-2023-49068	—	—	Apache DolphinScheduler: Information Leakage Vulnerability	Nov 27, 2023 2y ago
CVE-2023-6308	medium	6.3/10	Xiamen Four-Faith Video Surveillance Management System Apache Struts unrestricted upload	Nov 27, 2023 2y ago
CVE-2023-48796	—	—	Apache dolphinscheduler sensitive information disclosure	Nov 24, 2023 2y ago
CVE-2023-43123	—	—	Apache Storm: Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files	Nov 23, 2023 2y ago
CVE-2023-37924	—	—	Apache Submarine: SQL injection from unauthorized login	Nov 22, 2023 2y ago
CVE-2022-46337	—	—	Apache Derby: LDAP injection vulnerability in authenticator	Nov 20, 2023 2y ago
CVE-2023-46302	—	—	Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization	Nov 20, 2023 2y ago
CVE-2023-26031	—	—	Privilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems	Nov 16, 2023 2y ago
CVE-2023-42781	—	—	Apache Airflow: Permission verification bypass allows viewing dagruns of other dags	Nov 12, 2023 2y ago
CVE-2023-47037	—	—	Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)	Nov 12, 2023 2y ago
CVE-2023-39913	—	—	Apache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats	Nov 8, 2023 2y ago
CVE-2023-46819	—	—	Apache OFBiz: Execution of Solr plugin queries without authentication	Nov 7, 2023 2y ago
CVE-2023-46851	—	—	Apache Allura: sensitive information exposure via import	Nov 7, 2023 2y ago
CVE-2023-46215	—	—	Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend	Oct 28, 2023 2y ago
CVE-2023-46604	critical	10.0/10	Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack	Oct 27, 2023 2y ago
CVE-2023-46288	—	—	Apache Airflow: Sensitive parameters exposed in API when "non-sensitive-only" configuration is set	Oct 23, 2023 2y ago
CVE-2023-31122	—	—	Apache HTTP Server: mod_macro buffer over-read	Oct 23, 2023 2y ago