Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,509

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

694

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 871–900 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-43622	—	—	Apache HTTP Server: DoS in HTTP/2 with initial windows size 0	Oct 23, 2023 2y ago
CVE-2023-45802	—	—	Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST	Oct 23, 2023 2y ago
CVE-2023-44483	—	—	Apache Santuario: Private Key disclosure in debug-log output	Oct 20, 2023 2y ago
CVE-2023-46227	—	—	Apache inlong has an Arbitrary File Read Vulnerability	Oct 19, 2023 2y ago
CVE-2023-25753	—	—	Server-Side Request Forgery in Apache ShenYu	Oct 19, 2023 2y ago
CVE-2023-39456	—	—	Apache Traffic Server: Malformed http/2 frames can cause an abort	Oct 17, 2023 2y ago
CVE-2023-41752	—	—	Apache Traffic Server: s3_auth plugin problem with hash calculation	Oct 17, 2023 2y ago
CVE-2023-43666	—	—	Apache InLong: General user Unauthorized access User Management	Oct 16, 2023 2y ago
CVE-2023-43667	—	—	Apache InLong: Log Injection in Global functions	Oct 16, 2023 2y ago
CVE-2023-43668	—	—	Apache InLong: Jdbc Connection Security Bypass in InLong	Oct 16, 2023 2y ago
CVE-2023-45757	—	—	Apache bRPC: The builtin service rpcz page has an XSS attack vulnerability	Oct 16, 2023 2y ago
CVE-2023-42663	—	—	Apache Airflow: Bypass permission verification to view task instances of other dags	Oct 14, 2023 2y ago
CVE-2023-42792	—	—	Apache Airflow: Improper access control to DAG resources	Oct 14, 2023 2y ago
CVE-2023-45348	—	—	Apache Airflow: Configuration information leakage vulnerability	Oct 14, 2023 2y ago
CVE-2023-42780	—	—	Apache Airflow: Improper access control vulnerability in the "List dag warnings" feature	Oct 14, 2023 2y ago
CVE-2023-44981	—	—	Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication	Oct 11, 2023 2y ago
CVE-2023-45648	—	—	Apache Tomcat: Trailer header parsing too lenient	Oct 10, 2023 2y ago
CVE-2023-42795	—	—	Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests	Oct 10, 2023 2y ago
CVE-2023-42794	—	—	Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows	Oct 10, 2023 2y ago
CVE-2023-36419	high	8.8/10	Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability	Oct 10, 2023 2y ago
CVE-2023-39410	—	—	Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK	Sep 29, 2023 2y ago
CVE-2023-41834	—	—	Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences	Sep 19, 2023 2y ago
CVE-2023-41267	—	—	Apache HDFS Provider error message suggested installation of incorrect pip package	Sep 14, 2023 2y ago
CVE-2023-42503	—	—	Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file	Sep 14, 2023 2y ago
CVE-2023-41081	—	—	Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request	Sep 13, 2023 2y ago
CVE-2023-38156	high	7.2/10	Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability	Sep 12, 2023 2y ago
CVE-2023-40712	—	—	Apache Airflow: Secrets can be unmasked in the "Rendered Template"	Sep 12, 2023 2y ago
CVE-2023-40611	—	—	Apache Airflow Dag Runs Broken Access Control Vulnerability	Sep 12, 2023 2y ago
CVE-2023-32672	medium	4.3/10	Apache Superset: SQL parser edge case bypasses data access authorization	Sep 6, 2023 2y ago
CVE-2023-37941	medium	6.6/10	Apache Superset: Metadata db write access can lead to remote code execution	Sep 6, 2023 2y ago