Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,519

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

617

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1021–1050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-27603	—	—	Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue	Apr 10, 2023 3y ago
CVE-2023-27602	—	—	Apache Linkis publicsercice module unrestricted upload of file	Apr 10, 2023 3y ago
CVE-2023-29215	—	—	Apache Linkis JDBC EngineCon has a deserialization command execution	Apr 10, 2023 3y ago
CVE-2023-28710	—	—	Apache Airflow Spark Provider Arbitrary File Read via JDBC	Apr 7, 2023 3y ago
CVE-2023-28706	—	—	Apache Airflow Hive Provider Beeline Remote Command Execution	Apr 7, 2023 3y ago
CVE-2023-28707	—	—	Airflow Apache Drill Provider Arbitrary File Read Vulnerability	Apr 7, 2023 3y ago
CVE-2023-26269	—	—	Apache James server: Privilege escalation through unauthenticated JMX	Apr 3, 2023 3y ago
CVE-2023-28935	—	—	Apache UIMA DUCC: DUCC (EOL) allows RCE	Mar 30, 2023 3y ago
CVE-2023-28158	medium	6.5/10	Apache Archiva privilege escalation	Mar 29, 2023 3y ago
CVE-2023-28326	—	—	Apache OpenMeetings: allows user impersonation	Mar 28, 2023 3y ago
CVE-2023-25197	—	—	apache fineract: SQL injection vulnerability in certain procedure calls	Mar 28, 2023 3y ago
CVE-2023-25196	—	—	Apache Fineract: SQL injection vulnerability	Mar 28, 2023 3y ago
CVE-2023-25195	—	—	Apache Fineract: SSRF template type vulnerability in certain authenticated users	Mar 28, 2023 3y ago
CVE-2023-27296	—	—	Apache InLong: JDBC Deserialization Vulnerability in InLong	Mar 27, 2023 3y ago
CVE-2022-47502	—	—	Apache OpenOffice: Macro URL arbitrary script execution	Mar 24, 2023 3y ago
CVE-2022-38745	—	—	Apache OpenOffice: Empty entry in Java class path	Mar 24, 2023 3y ago
CVE-2023-28708	—	—	Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations	Mar 22, 2023 3y ago
CVE-2023-26513	high	7.5/10	Apache Sling Resource Merger: Requests to certain paths managed by the Apache Sling Resource Merger can lead to DoS	Mar 20, 2023 3y ago
CVE-2023-25695	—	—	Information disclosure in Apache Airflow	Mar 15, 2023 3y ago
CVE-2023-26464	—	—	Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender	Mar 10, 2023 3y ago
CVE-2023-27522	—	—	Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting	Mar 7, 2023 3y ago
CVE-2023-25690	—	—	Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy	Mar 7, 2023 3y ago
CVE-2023-25956	—	—	Apache Airflow AWS Provider: Arbitrary file read via AWS provider	Feb 24, 2023 3y ago
CVE-2023-25696	—	—	Apache Airflow Hive Provider Beeline RCE	Feb 24, 2023 3y ago
CVE-2023-25693	—	—	Sqoop Apache Airflow Provider Remote Code Execution Vulnerability	Feb 24, 2023 3y ago
CVE-2023-25692	—	—	Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service	Feb 24, 2023 3y ago
CVE-2023-25691	—	—	Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution	Feb 24, 2023 3y ago
CVE-2023-25621	—	—	Apache Sling does not allow to handle i18n content in a secure way	Feb 23, 2023 3y ago
CVE-2023-24998	—	—	Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts	Feb 20, 2023 3y ago
CVE-2023-25613	—	—	LDAP Injection Vulnerability in Apache Kerby	Feb 20, 2023 3y ago