Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,514

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

621

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 961–990 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-34981	—	—	Apache Tomcat: AJP response header mix-up	Jun 21, 2023 3y ago
CVE-2023-34340	—	—	Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials	Jun 21, 2023 3y ago
CVE-2023-35005	—	—	Apache Airflow: Information disclosure on configuration view	Jun 19, 2023 3y ago
CVE-2023-34396	medium	4.3/10	Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms	Jun 14, 2023 3y ago
CVE-2023-34149	medium	4.3/10	Apache Struts: DoS via OOM owing to not properly checking of list bounds	Jun 14, 2023 3y ago
CVE-2023-30631	—	—	Apache Traffic Server: Configuration option to block the PUSH method in ATS didn't work	Jun 14, 2023 3y ago
CVE-2023-33933	—	—	Apache Traffic Server: s3_auth plugin problem with hash calculation	Jun 14, 2023 3y ago
CVE-2022-47184	—	—	Apache Traffic Server: The TRACE method can be use to disclose network information	Jun 14, 2023 3y ago
CVE-2023-34212	—	—	Apache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components	Jun 12, 2023 3y ago
CVE-2023-34468	—	—	Apache NiFi: Potential Code Injection with Database Services using H2	Jun 12, 2023 3y ago
CVE-2023-30576	medium	6.8/10	Apache Guacamole: Use-after-free in handling of RDP audio input buffer	Jun 7, 2023 3y ago
CVE-2023-30575	medium	6.5/10	Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths	Jun 7, 2023 3y ago
CVE-2023-32550	critical	9.3/10	Landscape's Apache server-status is accessible by default	Jun 6, 2023 3y ago
CVE-2023-33234	—	—	Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration	May 30, 2023 3y ago
CVE-2023-30601	high	7.8/10	Apache Cassandra: Privilege escalation when enabling FQL/Audit logs	May 30, 2023 3y ago
CVE-2022-46907	—	—	Apache JSPWiki: XSS Injection points in several plugins	May 25, 2023 3y ago
CVE-2023-33246	—	—	Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function	May 24, 2023 3y ago
CVE-2023-31062	—	—	Apache InLong: Privilege escalation vulnerability for InLong	May 22, 2023 3y ago
CVE-2023-31064	—	—	Apache InLong: Insecurity direct object references cancelling applications	May 22, 2023 3y ago
CVE-2023-31065	—	—	Apache InLong: Insufficient Session Expiration in InLong	May 22, 2023 3y ago
CVE-2023-31066	—	—	Apache InLong: Insecure direct object references for inlong sources	May 22, 2023 3y ago
CVE-2023-31098	—	—	Apache InLong: Weak Password Implementation in InLong	May 22, 2023 3y ago
CVE-2023-31101	—	—	Apache InLong: Users who joined later can see the data of deleted users	May 22, 2023 3y ago
CVE-2023-31103	—	—	Apache InLong: Attackers can change the immutable name and type of cluster	May 22, 2023 3y ago
CVE-2023-31206	—	—	Apache InLong: Attackers can change the immutable name and type of nodes	May 22, 2023 3y ago
CVE-2023-31453	—	—	Apache InLong: IDOR make users can delete others' subscription	May 22, 2023 3y ago
CVE-2023-31454	—	—	Apache InLong: IDOR make users can bind any cluster	May 22, 2023 3y ago
CVE-2023-31058	—	—	Apache InLong: JDBC URL bypassing by adding blanks	May 22, 2023 3y ago
CVE-2023-28709	—	—	Apache Tomcat: Fix for CVE-2023-24998 is incomplete	May 22, 2023 3y ago
CVE-2022-47937	—	—	Multiple parsing problems in the Apache Sling Commons JSON module	May 15, 2023 3y ago