Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,709

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 901–930 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-36268	—	—	Apache InLong TubeMQ Client: Remote Code Execution vulnerability	Aug 2, 2024 2y ago
CVE-2024-27182	—	—	Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability	Aug 2, 2024 2y ago
CVE-2024-27181	—	—	Apache Linkis Basic management services: Privilege Escalation Attack vulnerability	Aug 2, 2024 2y ago
CVE-2023-48396	—	—	Apache SeaTunnel Web: Authentication bypass	Jul 30, 2024 2y ago
CVE-2023-38522	—	—	Apache Traffic Server: Incomplete field name check allows request smuggling	Jul 26, 2024 2y ago
CVE-2024-35296	—	—	Apache Traffic Server: Invalid Accept-Encoding can force forwarding requests	Jul 26, 2024 2y ago
CVE-2024-35161	—	—	Apache Traffic Server: Incomplete check for chunked trailer section allows request smuggling	Jul 26, 2024 2y ago
CVE-2024-25090	—	—	Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode	Jul 26, 2024 2y ago
CVE-2023-48362	—	—	Apache Drill: XXE Vulnerability in XML Format Reader	Jul 24, 2024 2y ago
CVE-2024-39676	—	—	Apache Pinot: Unauthorized endpoint exposed sensitive information	Jul 24, 2024 2y ago
CVE-2024-41178	—	—	Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files	Jul 23, 2024 2y ago
CVE-2024-29070	—	—	Apache StreamPark: session not invalidated after logout	Jul 23, 2024 2y ago
CVE-2024-34457	—	—	Apache StreamPark IDOR Vulnerability	Jul 22, 2024 2y ago
CVE-2024-38503	—	—	Apache Syncope: HTML tags can be injected into Console or Enduser text fields	Jul 22, 2024 2y ago
CVE-2024-23321	—	—	Apache RocketMQ: Unauthorized Exposure of Sensitive Data	Jul 22, 2024 2y ago
CVE-2024-41107	—	—	Apache CloudStack: SAML Signature Exclusion	Jul 19, 2024 2y ago
CVE-2024-41172	—	—	Apache CXF: Unrestricted memory consumption in CXF HTTP clients	Jul 19, 2024 2y ago
CVE-2024-32007	—	—	Apache CXF Denial of Service vulnerability in JOSE	Jul 19, 2024 2y ago
CVE-2024-29736	—	—	Apache CXF: SSRF vulnerability via WADL stylesheet parameter	Jul 19, 2024 2y ago
CVE-2024-29178	—	—	Apache StreamPark: FreeMarker SSTI RCE Vulnerability	Jul 18, 2024 2y ago
CVE-2024-40725	—	—	Apache HTTP Server: source code disclosure with handlers configured via AddType	Jul 18, 2024 2y ago
CVE-2024-40898	—	—	Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows	Jul 18, 2024 2y ago
CVE-2024-29120	—	—	Apache StreamPark: Information leakage vulnerability	Jul 17, 2024 2y ago
CVE-2024-31411	—	—	Apache StreamPipes: Potential remote code execution (RCE) via file upload	Jul 17, 2024 2y ago
CVE-2024-31979	—	—	Apache StreamPipes: Possibility of SSRF in pipeline element installation process	Jul 17, 2024 2y ago
CVE-2024-30471	—	—	Apache StreamPipes: Potential creation of multiple identical accounts	Jul 17, 2024 2y ago
CVE-2024-29737	—	—	Apache StreamPark (incubating): maven build params could trigger remote command execution	Jul 17, 2024 2y ago
CVE-2023-52291	—	—	Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution	Jul 17, 2024 2y ago
CVE-2024-39877	—	—	Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler	Jul 17, 2024 2y ago
CVE-2024-39863	—	—	Apache Airflow: Potential XSS Vulnerability	Jul 17, 2024 2y ago