Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,565

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1021–1050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-50378	—	—	Apache Ambari: Various XSS problems	Mar 1, 2024 2y ago
CVE-2024-26280	—	—	Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)	Mar 1, 2024 2y ago
CVE-2024-27906	—	—	Apache Airflow: Dag Code and Import Error Permissions Ignored	Feb 29, 2024 2y ago
CVE-2024-23946	—	—	Apache OFBiz: Path traversal or file inclusion	Feb 28, 2024 2y ago
CVE-2024-25065	—	—	Apache OFBiz: Path traversal allowing authentication bypass.	Feb 28, 2024 2y ago
CVE-2024-23807	—	—	Apache Xerces C++: Use-after-free on external DTD scan	Feb 28, 2024 2y ago
CVE-2024-26016	medium	4.3/10	Apache Superset: Improper authorization validation on dashboards and charts import	Feb 28, 2024 2y ago
CVE-2024-24779	medium	5.0/10	Apache Superset: Improper data authorization when creating a new dataset	Feb 28, 2024 2y ago
CVE-2024-24772	medium	4.3/10	Apache Superset: Improper Neutralisation of custom SQL on embedded context	Feb 28, 2024 2y ago
CVE-2024-24773	medium	4.9/10	Apache Superset: Improper validation of SQL statements allows for unauthorized access to data	Feb 28, 2024 2y ago
CVE-2024-27315	medium	4.3/10	Apache Superset: Improper error handling on alerts	Feb 28, 2024 2y ago
CVE-2023-50380	—	—	Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server	Feb 27, 2024 2y ago
CVE-2024-21742	—	—	Apache James Mime4J: Mime4J DOM header injection	Feb 27, 2024 2y ago
CVE-2024-27905	—	—	Apache Aurora: padding oracle can allow construction an authentication cookie	Feb 27, 2024 2y ago
CVE-2023-51747	—	—	SMTP smuggling in Apache James	Feb 27, 2024 2y ago
CVE-2023-51518	—	—	Apache James server: Privilege escalation via JMX pre-authentication deserialisation	Feb 27, 2024 2y ago
CVE-2023-50379	—	—	Apache Ambari: authenticated users could perform command injection to perform RCE	Feb 27, 2024 2y ago
CVE-2024-22371	low	2.9/10	Apache Camel issue on ExchangeCreatedEvent	Feb 26, 2024 2y ago
CVE-2024-23320	—	—	Apache DolphinScheduler: Arbitrary js execution as root for authenticated users	Feb 23, 2024 2y ago
CVE-2024-22393	—	—	Apache Answer: Pixel Flood Attack by uploading the large pixel file	Feb 22, 2024 2y ago
CVE-2024-23349	—	—	Apache Answer: XSS vulnerability when submitting summary	Feb 22, 2024 2y ago
CVE-2024-26578	—	—	Apache Answer: Repeated submission at registration created duplicate users with the same name	Feb 22, 2024 2y ago
CVE-2024-25141	—	—	Apache Airflow Mongo Provider: Certificate validation isn't respected even if SSL is enabled for apache-airflow-providers-mongo	Feb 20, 2024 2y ago
CVE-2024-23114	—	—	Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository	Feb 20, 2024 2y ago
CVE-2024-22369	—	—	Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository	Feb 20, 2024 2y ago
CVE-2023-51770	—	—	Apache DolphinScheduler: Arbitrary File Read Vulnerability	Feb 20, 2024 2y ago
CVE-2023-50270	—	—	Apache DolphinScheduler: Session do not expire after password change	Feb 20, 2024 2y ago
CVE-2023-49250	—	—	Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil	Feb 20, 2024 2y ago
CVE-2023-49109	—	—	Remote Code Execution in Apache Dolphinscheduler	Feb 20, 2024 2y ago
CVE-2024-25710	high	8.1/10	Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file	Feb 19, 2024 2y ago