Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,709

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 961–990 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34365	—	—	Apache Karaf Cave: Cave SSRF and arbitrary file access	May 9, 2024 2y ago
CVE-2024-26579	—	—	Apache Inlong JDBC Vulnerability	May 8, 2024 2y ago
CVE-2024-32113	—	—	Apache OFBiz: Path traversal leading to RCE	May 8, 2024 2y ago
CVE-2024-28148	medium	4.3/10	Apache Superset: Incorrect datasource authorization on explore REST API	May 7, 2024 2y ago
CVE-2023-35701	—	—	Apache Hive: Arbitrary command execution via JDBC driver	May 3, 2024 2y ago
CVE-2024-32638	—	—	Apache APISIX: Forward-Auth Request Smuggling	May 2, 2024 2y ago
CVE-2024-32114	high	8.5/10	Apache ActiveMQ: Jolokia and REST API were not secured with default configuration	May 2, 2024 2y ago
CVE-2024-27349	—	—	Apache HugeGraph-Server: Bypass whitelist in Auth mode	Apr 22, 2024 2y ago
CVE-2024-27348	—	—	Apache HugeGraph-Server: Command execution in gremlin	Apr 22, 2024 2y ago
CVE-2024-27347	—	—	Apache HugeGraph-Hubble: SSRF in Hubble connection page	Apr 22, 2024 2y ago
CVE-2024-29733	—	—	Apache Airflow FTP Provider: FTP_TLS instance with unverified SSL context	Apr 21, 2024 2y ago
CVE-2024-29217	—	—	Apache Answer: XSS vulnerability when changing personal website	Apr 21, 2024 2y ago
CVE-2024-31869	—	—	Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used	Apr 18, 2024 2y ago
CVE-2024-31391	—	—	Apache Solr Operator: Solr-Operator liveness and readiness probes may leak basic auth credentials	Apr 12, 2024 2y ago
CVE-2024-27309	—	—	Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode	Apr 12, 2024 2y ago
CVE-2024-31309	—	—	Apache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attack	Apr 10, 2024 2y ago
CVE-2024-31867	—	—	Apache Zeppelin: LDAP search filter query Injection Vulnerability	Apr 9, 2024 2y ago
CVE-2024-31868	—	—	Apache Zeppelin: XSS vulnerability in the helium module	Apr 9, 2024 2y ago
CVE-2024-31866	—	—	Apache Zeppelin: Interpreter download command does not escape malicious code injection	Apr 9, 2024 2y ago
CVE-2024-31865	—	—	Apache Zeppelin: Cron arbitrary user impersonation with improper privileges	Apr 9, 2024 2y ago
CVE-2024-31864	—	—	Apache Zeppelin: Remote code execution by adding malicious JDBC connection string	Apr 9, 2024 2y ago
CVE-2024-31863	—	—	Apache Zeppelin: Replacing other users notebook, bypassing any permissions	Apr 9, 2024 2y ago
CVE-2024-31862	—	—	Apache Zeppelin: Denial of service with invalid notebook name	Apr 9, 2024 2y ago
CVE-2022-47894	—	—	Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE	Apr 9, 2024 2y ago
CVE-2021-28656	—	—	Apache Zeppelin: CSRF vulnerability in the Credentials page	Apr 9, 2024 2y ago
CVE-2024-31860	—	—	Apache Zeppelin: Path traversal vulnerability	Apr 9, 2024 2y ago
CVE-2024-24746	—	—	Apache NimBLE: Denial of service in NimBLE Bluetooth stack	Apr 6, 2024 2y ago
CVE-2024-27316	—	—	Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames	Apr 4, 2024 2y ago
CVE-2024-24795	—	—	Apache HTTP Server: HTTP Response Splitting in multiple modules	Apr 4, 2024 2y ago
CVE-2023-38709	—	—	Apache HTTP Server: HTTP response splitting	Apr 4, 2024 2y ago