Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,382

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,192

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 61–90 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-61484	—	—	Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS	Aug 5, 2026 21d ago
CVE-2026-61483	—	—	Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS	Aug 5, 2026 21d ago
CVE-2026-68080	—	—	Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service	Aug 5, 2026 21d ago
CVE-2026-67592	—	—	Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery	Aug 5, 2026 21d ago
CVE-2026-67555	—	—	Apache Qpid Proton Dotnet: Unable to govern the maximum number of transfer frames per incoming delivery	Aug 5, 2026 21d ago
CVE-2026-68078	—	—	Apache Qpid Broker-J: Unable to govern the maximum number of transfer frames per incoming delivery	Aug 5, 2026 21d ago
CVE-2026-66277	—	—	Apache Qpid Proton-J: Unable to govern the maximum number of transfer frames per incoming delivery	Aug 5, 2026 21d ago
CVE-2026-67554	—	—	Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service	Aug 5, 2026 21d ago
CVE-2026-68077	—	—	Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service	Aug 5, 2026 21d ago
CVE-2026-66276	—	—	Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of service	Aug 5, 2026 21d ago
CVE-2026-67591	—	—	Apache Qpid ProtonJ2: Incoming session flow control window can be exceeded	Aug 5, 2026 21d ago
CVE-2026-67553	—	—	Apache Qpid Proton Dotnet: Incoming session flow control window can be exceeded	Aug 5, 2026 21d ago
CVE-2026-68075	—	—	Apache Qpid Broker-J: Incoming session flow control window can be exceeded	Aug 5, 2026 21d ago
CVE-2026-66275	—	—	Apache Qpid Proton-J: Incoming session flow control window can be exceeded	Aug 5, 2026 21d ago
CVE-2026-67590	—	—	Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow	Aug 5, 2026 21d ago
CVE-2026-67552	—	—	Apache Qpid Proton Dotnet: Unbounded type nesting can lead to pre-authentication stackoverflow	Aug 5, 2026 21d ago
CVE-2026-68073	—	—	Apache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication stack overflow	Aug 5, 2026 21d ago
CVE-2026-66274	—	—	Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow	Aug 5, 2026 21d ago
CVE-2026-67589	—	—	Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authentication	Aug 5, 2026 21d ago
CVE-2026-67551	—	—	Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authentication	Aug 5, 2026 21d ago
CVE-2026-68060	—	—	Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication	Aug 5, 2026 21d ago
CVE-2026-66273	—	—	Apache Qpid Proton-J: Type size/count handling can lead to excessive allocation pre-authentication	Aug 5, 2026 21d ago
CVE-2026-67588	—	—	Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustion	Aug 5, 2026 21d ago
CVE-2026-67465	—	—	Apache Qpid Proton Dotnet: Unbounded symbol value caching can lead to pre-authentication resource exhaustion	Aug 5, 2026 21d ago
CVE-2026-68074	—	—	Apache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion	Aug 5, 2026 21d ago
CVE-2026-66257	—	—	Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion	Aug 5, 2026 21d ago
CVE-2026-68981	high	8.8/10	Apache NiFi: Uncontrolled Resource Consumption through Decompression of HTTP Requests	Aug 3, 2026 22d ago
CVE-2026-68980	low	2.3/10	Apache NiFi: Authorization Bypass for Parameter Context Asset Deletion	Aug 3, 2026 22d ago
CVE-2026-62354	high	7.7/10	Apache NiFi: Incorrect Authorization for Parameter Context Validation Requests	Aug 3, 2026 22d ago
CVE-2026-68979	medium	5.9/10	Apache NiFi: Missing Authorization for Components Referenced by Parameter Context Updates	Aug 3, 2026 22d ago