Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,709

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 991–1020 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-29008	—	—	Apache CloudStack: The extraconfig feature can be abused to load hypervisor resources on a VM instance	Apr 4, 2024 2y ago
CVE-2024-29007	—	—	Apache CloudStack: When downloading templates or ISOs, the management server and SSVM follow HTTP redirects with potentially dangerous consequences	Apr 4, 2024 2y ago
CVE-2024-29006	—	—	Apache CloudStack: x-forwarded-for HTTP header parsed by default	Apr 4, 2024 2y ago
CVE-2024-29834	medium	6.4/10	Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints	Apr 2, 2024 2y ago
CVE-2024-23537	high	8.4/10	Apache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permissions, to escalate their privileges to any role.	Mar 29, 2024 2y ago
CVE-2024-23538	critical	9.9/10	Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.	Mar 29, 2024 2y ago
CVE-2024-23539	high	8.3/10	Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.	Mar 29, 2024 2y ago
CVE-2024-29735	—	—	Apache Airflow: Potentially harmful permission changing by log task handler	Mar 26, 2024 2y ago
CVE-2024-27438	—	—	Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution	Mar 21, 2024 2y ago
CVE-2024-26307	—	—	Apache Doris: Possible race condition	Mar 21, 2024 2y ago
CVE-2024-29131	—	—	Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()	Mar 21, 2024 2y ago
CVE-2024-29133	—	—	Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree	Mar 21, 2024 2y ago
CVE-2024-27439	—	—	Apache Wicket: Possible bypass of CSRF protection	Mar 19, 2024 2y ago
CVE-2024-24683	—	—	Apache Hop Engine: ID isn't escaped when generating HTML	Mar 19, 2024 2y ago
CVE-2024-28752	—	—	Apache CXF SSRF Vulnerability using the Aegis databinding	Mar 15, 2024 2y ago
CVE-2024-23944	—	—	Apache ZooKeeper: Information disclosure in persistent watcher handling	Mar 15, 2024 2y ago
CVE-2024-28746	—	—	Apache Airflow: Ignored Airflow Permissions	Mar 14, 2024 2y ago
CVE-2024-23672	—	—	Apache Tomcat: WebSocket DoS with incomplete closing handshake	Mar 13, 2024 2y ago
CVE-2024-24549	—	—	Apache Tomcat: HTTP/2 header handling DoS	Mar 13, 2024 2y ago
CVE-2024-27894	high	8.5/10	Apache Pulsar: Pulsar Functions Worker Allows Unauthorized File Access and Unauthorized HTTP/HTTPS Proxying	Mar 12, 2024 2y ago
CVE-2024-27317	high	8.4/10	Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification	Mar 12, 2024 2y ago
CVE-2024-27135	high	8.5/10	Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution	Mar 12, 2024 2y ago
CVE-2022-34321	high	8.2/10	Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint	Mar 12, 2024 2y ago
CVE-2024-28098	medium	6.4/10	Apache Pulsar: Improper Authorization For Topic-Level Policy Management	Mar 12, 2024 2y ago
CVE-2023-41313	—	—	Apache Doris: Timing Attack weakness	Mar 12, 2024 2y ago
CVE-2023-50740	—	—	Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged	Mar 6, 2024 2y ago
CVE-2024-26580	—	—	Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability	Mar 6, 2024 2y ago
CVE-2024-27138	—	—	Apache Archiva: disabling user registration is not effective	Mar 1, 2024 2y ago
CVE-2024-27139	—	—	Apache Archiva: incorrect authentication potentially leading to account takeover	Mar 1, 2024 2y ago
CVE-2024-27140	—	—	Apache Archiva: reflected XSS	Mar 1, 2024 2y ago