Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,510

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

626

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 901–930 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-39265	low	3.8/10	Apache Superset: Possible Unauthorized Registration of SQLite Database Connections	Sep 6, 2023 2y ago
CVE-2023-39264	medium	4.3/10	Apache Superset: Stack traces enabled by default	Sep 6, 2023 2y ago
CVE-2023-27523	medium	5.0/10	Apache Superset: Improper data permission validation on Jinja templated queries	Sep 6, 2023 2y ago
CVE-2023-36388	medium	4.3/10	Apache Superset: Improper API permission for low privilege users allows for SSRF	Sep 6, 2023 2y ago
CVE-2023-27526	medium	4.3/10	Apache Superset: Improper Authorization check on import charts	Sep 6, 2023 2y ago
CVE-2023-36387	medium	5.4/10	Apache Superset: Improper API permission for low privilege users	Sep 6, 2023 2y ago
CVE-2023-40743	—	—	Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService	Sep 5, 2023 2y ago
CVE-2023-41180	—	—	Apache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++	Sep 3, 2023 2y ago
CVE-2023-40195	—	—	Apache Airflow Spark Provider Deserialization Vulnerability RCE	Aug 28, 2023 2y ago
CVE-2023-27604	—	—	Apache Airflow Sqoop Provider: Airflow Sqoop Provider RCE Vulnerability	Aug 28, 2023 2y ago
CVE-2023-41080	—	—	Apache Tomcat: Open redirect with FORM authentication	Aug 25, 2023 2y ago
CVE-2023-39441	—	—	Apache Airflow SMTP Provider, Apache Airflow IMAP Provider, Apache Airflow: SMTP/IMAP client components allowed MITM due to missing Certificate Validation	Aug 23, 2023 2y ago
CVE-2023-37379	—	—	Apache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature	Aug 23, 2023 2y ago
CVE-2023-40273	—	—	Session fixation in Apache Airflow web interface	Aug 23, 2023 2y ago
CVE-2022-44729	—	—	Apache XML Graphics Batik: Information disclosure vulnerability	Aug 22, 2023 2y ago
CVE-2022-44730	—	—	Apache XML Graphics Batik: Information disclosure vulnerability	Aug 22, 2023 2y ago
CVE-2022-46751	—	—	Apache Ivy: XML External Entity vulnerability in Apache Ivy	Aug 21, 2023 2y ago
CVE-2023-40037	—	—	Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs	Aug 18, 2023 2y ago
CVE-2023-40272	—	—	Apache Airflow Spark Provider Arbitrary File Read via JDBC	Aug 17, 2023 2y ago
CVE-2023-39553	—	—	Apache Airflow Drill Provider Arbitrary File Read Vulnerability	Aug 11, 2023 2y ago
CVE-2023-33934	—	—	Apache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies	Aug 9, 2023 2y ago
CVE-2022-47185	—	—	Apache Traffic Server: Invalid Range header causes a crash	Aug 9, 2023 2y ago
CVE-2023-36881	medium	4.5/10	Azure Apache Ambari Spoofing Vulnerability	Aug 8, 2023 2y ago
CVE-2023-36877	medium	4.5/10	Azure Apache Oozie Spoofing Vulnerability	Aug 8, 2023 2y ago
CVE-2023-38188	medium	4.5/10	Azure Apache Hadoop Spoofing Vulnerability	Aug 8, 2023 2y ago
CVE-2023-35393	medium	4.5/10	Azure Apache Hive Spoofing Vulnerability	Aug 8, 2023 2y ago
CVE-2023-37581	—	—	Apache Roller: Roller's weblog category, weblog settings and file-upload features did not properly sanitize input could be exploited to perform Reflected Cross Site Scripting (XSS) even on a Roller site configured for untrusted users.	Aug 6, 2023 2y ago
CVE-2023-39508	—	—	Apache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges	Aug 5, 2023 2y ago
CVE-2023-36542	—	—	Apache NiFi: Potential Code Injection with Properties Referencing Remote Resources	Jul 29, 2023 2y ago
CVE-2023-38647	—	—	Apache Helix: Deserialization vulnerability in Helix workflow and REST	Jul 26, 2023 2y ago