Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,514

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

626

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 931–960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-38435	—	—	Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin	Jul 25, 2023 2y ago
CVE-2023-37895	—	—	Apache Jackrabbit RMI access can lead to RCE	Jul 25, 2023 2y ago
CVE-2023-35088	—	—	Apache InLong: SQL injection in audit endpoint	Jul 25, 2023 2y ago
CVE-2023-34434	—	—	Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param	Jul 25, 2023 2y ago
CVE-2023-34189	—	—	Apache InLong: General user can delete and update process	Jul 25, 2023 2y ago
CVE-2023-34478	—	—	Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests.	Jul 24, 2023 2y ago
CVE-2023-26512	—	—	Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data	Jul 17, 2023 2y ago
CVE-2023-37415	—	—	Apache Airflow Apache Hive Provider: Improper Input Validation in Hive Provider with proxy_user	Jul 13, 2023 2y ago
CVE-2022-45855	high	8.0/10	Apache Ambari: Allows authenticated metrics consumers to perform RCE	Jul 12, 2023 2y ago
CVE-2022-42009	high	8.0/10	Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application.	Jul 12, 2023 2y ago
CVE-2023-37582	—	—	Apache RocketMQ: Possible remote code execution when using the update configuration function	Jul 12, 2023 2y ago
CVE-2023-22888	—	—	Apache Airflow: Scheduler remote DoS	Jul 12, 2023 2y ago
CVE-2023-36543	—	—	Apache Airflow: ReDoS via dags function	Jul 12, 2023 2y ago
CVE-2022-46651	—	—	Apache Airflow: Security vulnerability on AirFlow Connections	Jul 12, 2023 2y ago
CVE-2023-22887	—	—	Apache Airflow path traversal by authenticated user	Jul 12, 2023 2y ago
CVE-2023-35908	—	—	Apache Airflow: Access to DAGs without relevant permission	Jul 12, 2023 2y ago
CVE-2023-30428	high	8.2/10	Apache Pulsar Broker: Incorrect Authorization Validation for Rest Producer	Jul 12, 2023 2y ago
CVE-2023-30429	critical	9.6/10	Apache Pulsar: Incorrect Authorization for Function Worker when using mTLS Authentication through Pulsar Proxy	Jul 12, 2023 2y ago
CVE-2023-31007	—	0.0/10	Apache Pulsar: Broker does not always disconnect client when authentication data expires	Jul 12, 2023 2y ago
CVE-2023-37579	high	8.2/10	Apache Pulsar Function Worker: Incorrect Authorization for Function Worker Can Leak Sink/Source Credentials	Jul 12, 2023 2y ago
CVE-2023-32200	—	—	Apache Jena: Exposure of execution in script engine expressions.	Jul 12, 2023 2y ago
CVE-2023-34442	—	—	Apache Camel JIRA: Temporary file information disclosure in Camel-Jira	Jul 10, 2023 2y ago
CVE-2023-35887	medium	5.0/10	Apache MINA SSHD: Information disclosure bugs with RootedFilesystem	Jul 10, 2023 2y ago
CVE-2023-33008	—	—	Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale	Jul 7, 2023 2y ago
CVE-2023-34150	medium	6.5/10	Apache Any23: Possible excessive allocation of resources reading input.	Jul 5, 2023 2y ago
CVE-2023-35797	—	—	Apache Airflow Hive Provider Beeline RCE with Principal	Jul 3, 2023 2y ago
CVE-2023-22886	—	—	Apache Airflow JDBC Provider: RCE Vulnerability	Jun 29, 2023 3y ago
CVE-2023-35798	—	—	Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability	Jun 27, 2023 3y ago
CVE-2023-34395	—	—	Apache Airflow ODBC Provider: Remote code execution vulnerability	Jun 27, 2023 3y ago
CVE-2023-31469	—	—	Apache StreamPipes: Privilege escalation through non-admin user	Jun 23, 2023 3y ago