Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,709

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 931–960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-39887	medium	4.3/10	Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions	Jul 16, 2024 2y ago
CVE-2023-52290	—	—	Apache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection vulnerability	Jul 16, 2024 2y ago
CVE-2023-49566	—	—	Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability	Jul 15, 2024 2y ago
CVE-2023-46801	—	—	Apache Linkis DataSource: DataSource Remote code execution vulnerability	Jul 15, 2024 2y ago
CVE-2023-41916	—	—	Apache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file reading	Jul 15, 2024 2y ago
CVE-2024-36522	—	—	Apache Wicket: Remote code execution via XSLT injection	Jul 12, 2024 2y ago
CVE-2024-37389	medium	4.6/10	Apache NiFi: Improper Neutralization of Input in Parameter Context Description	Jul 8, 2024 2y ago
CVE-2024-38346	—	—	Apache CloudStack: Unauthenticated cluster service port leads to remote execution	Jul 5, 2024 2y ago
CVE-2024-39864	—	—	Apache CloudStack: Integration API service uses dynamic port when disabled	Jul 5, 2024 2y ago
CVE-2024-39884	—	—	Apache HTTP Server: source code disclosure with handlers configured via AddType	Jul 4, 2024 2y ago
CVE-2024-34750	—	—	Apache Tomcat: HTTP/2 excess header handling DoS	Jul 3, 2024 2y ago
CVE-2024-39573	—	—	Apache HTTP Server: mod_rewrite proxy handler substitution	Jul 1, 2024 2y ago
CVE-2024-38477	—	—	Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request	Jul 1, 2024 2y ago
CVE-2024-38476	—	—	Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect	Jul 1, 2024 2y ago
CVE-2024-38475	—	—	Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.	Jul 1, 2024 2y ago
CVE-2024-38474	—	—	Apache HTTP Server weakness with encoded question marks in backreferences	Jul 1, 2024 2y ago
CVE-2024-38473	—	—	Apache HTTP Server proxy encoding problem	Jul 1, 2024 2y ago
CVE-2024-38472	—	—	Apache HTTP Server on WIndows UNC SSRF	Jul 1, 2024 2y ago
CVE-2024-36387	—	—	Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2	Jul 1, 2024 2y ago
CVE-2024-29868	—	—	Apache StreamPipes, Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation	Jun 24, 2024 2y ago
CVE-2024-27136	—	—	Apache JSPWiki: Cross-site scripting vulnerability on upload page	Jun 24, 2024 2y ago
CVE-2024-38379	—	—	Apache Allura: Stored authenticated XSS	Jun 22, 2024 2y ago
CVE-2024-34693	medium	6.8/10	Apache Superset: Server arbitrary file read	Jun 20, 2024 2y ago
CVE-2024-25142	—	—	Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache	Jun 14, 2024 2y ago
CVE-2024-36265	—	—	Apache Submarine Server Core: authorization bypass	Jun 12, 2024 2y ago
CVE-2024-36264	—	—	Apache Submarine Commons Utils: default secret	Jun 12, 2024 2y ago
CVE-2024-36263	—	—	Apache Submarine Server Core: SQL injection	Jun 12, 2024 2y ago
CVE-2024-36471	—	—	Apache Allura: sensitive information exposure via DNS rebinding	Jun 10, 2024 2y ago
CVE-2024-36104	—	—	Apache OFBiz: Path traversal leading to a RCE	Jun 4, 2024 2y ago
CVE-2024-32077	—	—	Apache Airflow: XSS vulnerability in Task Instance Log/Log Details	May 14, 2024 2y ago