Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,519

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

622

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 991–1020 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-28936	—	—	Apache OpenMeetings: insufficient check of invitation hash	May 12, 2023 3y ago
CVE-2023-29032	—	—	Apache OpenMeetings: allows bypass authentication	May 12, 2023 3y ago
CVE-2023-29246	—	—	Apache OpenMeetings: allows null-byte Injection	May 12, 2023 3y ago
CVE-2023-25754	—	—	Apache Airflow: Privilege escalation using airflow logs	May 8, 2023 3y ago
CVE-2023-29247	—	—	Stored XSS on Apache Airflow	May 8, 2023 3y ago
CVE-2023-31039	—	—	Apache bRPC: ServerOptions.pid_file may cause arbitrary code execution	May 8, 2023 3y ago
CVE-2023-31038	—	—	Apache Log4cxx: SQL injection when using ODBC appender	May 8, 2023 3y ago
CVE-2021-40331	—	—	Permissions problem in the Apache Ranger Hive Plugin	May 5, 2023 3y ago
CVE-2022-45048	high	8.4/10	Apache Ranger: code execution vulnerability in policy expressions	May 5, 2023 3y ago
CVE-2023-26268	medium	4.4/10	Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes	May 2, 2023 3y ago
CVE-2023-31207	medium	4.4/10	Automation user secret logged to Apache access log	May 2, 2023 3y ago
CVE-2023-32007	—	—	Apache Spark: Shell command injection via Spark UI	May 2, 2023 3y ago
CVE-2022-46365	—	—	Apache StreamPark (incubating): Logic error causing any account reset	May 1, 2023 3y ago
CVE-2022-45801	—	—	Apache StreamPark (incubating): LDAP Injection Vulnerability	May 1, 2023 3y ago
CVE-2022-45802	—	—	Apache StreamPark (incubating): Upload any file to any directory	May 1, 2023 3y ago
CVE-2023-22665	—	—	Apache Jena: Exposure of arbitrary execution in script engine expressions.	Apr 25, 2023 3y ago
CVE-2023-30776	medium	4.9/10	Apache Superset: Database connection password leak	Apr 24, 2023 3y ago
CVE-2023-27524	high	8.9/10	Apache Superset: Session validation vulnerability when using provided default SECRET_KEY	Apr 24, 2023 3y ago
CVE-2023-25601	—	—	Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication	Apr 20, 2023 3y ago
CVE-2022-46302	high	8.8/10	Remote Code Execution with Root Privileges via Broad Apache Permissions	Apr 20, 2023 3y ago
CVE-2023-25504	medium	4.9/10	Apache Superset: Possible SSRF on import datasets	Apr 17, 2023 3y ago
CVE-2023-27525	low	3.1/10	Apache Superset: Incorrect default permissions for Gamma role	Apr 17, 2023 3y ago
CVE-2023-22946	medium	6.4/10	Apache Spark proxy-user privilege escalation from malicious configuration class	Apr 17, 2023 3y ago
CVE-2023-30771	—	—	Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench	Apr 17, 2023 3y ago
CVE-2023-24831	—	—	Apache IoTDB grafana-connector Login Bypass Vulnerability	Apr 17, 2023 3y ago
CVE-2022-47501	—	—	Apache OFBiz: Arbitrary file reading vulnerability	Apr 14, 2023 3y ago
CVE-2022-45064	high	8.0/10	Apache Sling Engine: Include-based XSS	Apr 13, 2023 3y ago
CVE-2023-30465	—	—	Apache InLong: SQL injection in apache inLong 1.5.0	Apr 11, 2023 3y ago
CVE-2023-29216	—	—	Apache Linkis DatasourceManager module has a deserialization command execution	Apr 10, 2023 3y ago
CVE-2023-27987	—	—	Apache Linkis gateway module token authentication bypass	Apr 10, 2023 3y ago