Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,565

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1051–1080 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-26308	—	—	Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file	Feb 19, 2024 2y ago
CVE-2024-23952	medium	6.5/10	Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (version range fix for CVE-2023-46104)	Feb 14, 2024 2y ago
CVE-2023-50291	—	—	Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords	Feb 9, 2024 2y ago
CVE-2023-50292	—	—	Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users	Feb 9, 2024 2y ago
CVE-2023-50298	—	—	Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions	Feb 9, 2024 2y ago
CVE-2023-50386	—	—	Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets	Feb 9, 2024 2y ago
CVE-2024-23452	—	—	Apache bRPC: HTTP request smuggling vulnerability	Feb 8, 2024 2y ago
CVE-2023-39196	medium	5.3/10	Apache Ozone: Missing mutual TLS authentication in one of the service internal Ozone Storage Container Manager endpoints	Feb 7, 2024 2y ago
CVE-2023-51437	high	7.4/10	Apache Pulsar: Timing attack in SASL token signature verification	Feb 7, 2024 2y ago
CVE-2024-23673	high	8.5/10	Apache Sling Servlets Resolver: Malicious code execution via path traversal	Feb 6, 2024 2y ago
CVE-2023-44313	high	7.6/10	Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API	Jan 31, 2024 2y ago
CVE-2023-44312	medium	5.8/10	Apache ServiceComb Service-Center: attacker can query all environment variables of the service-center server	Jan 31, 2024 2y ago
CVE-2023-29055	—	—	Apache Kylin: Insufficiently protected credentials in config file	Jan 29, 2024 2y ago
CVE-2023-50944	—	—	Apache Airflow: Bypass permission verification to read code of other dags	Jan 24, 2024 2y ago
CVE-2023-50943	—	—	Apache Airflow: Potential pickle deserialization vulnerability in XComs	Jan 24, 2024 2y ago
CVE-2023-51702	—	—	Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service	Jan 24, 2024 2y ago
CVE-2023-49657	critical	9.6/10	Apache Superset: Stored XSS in Dashboard Title and Chart Title	Jan 23, 2024 2y ago
CVE-2024-21733	—	—	Apache Tomcat: Leaking of unrelated request bodies in default error page	Jan 19, 2024 2y ago
CVE-2023-46226	—	—	Apache IoTDB: Remote Code Execution (RCE) risk via the UDF	Jan 15, 2024 2y ago
CVE-2023-46749	—	—	Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting	Jan 15, 2024 2y ago
CVE-2023-50290	—	—	Apache Solr: Host environment variables are published via the Metrics API	Jan 15, 2024 2y ago
CVE-2023-49619	—	—	Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.	Jan 10, 2024 2y ago
CVE-2023-51441	—	—	Apache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API	Jan 6, 2024 2y ago
CVE-2023-51784	—	—	Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager	Jan 3, 2024 2y ago
CVE-2023-51785	—	—	Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager	Jan 3, 2024 2y ago
CVE-2023-49299	—	—	Apache DolphinScheduler: Arbitrary js execute as root for authenticated users	Dec 30, 2023 2y ago
CVE-2023-47804	—	—	Apache OpenOffice: Macro URL arbitrary script execution	Dec 29, 2023 2y ago
CVE-2023-51467	—	—	Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability	Dec 26, 2023 2y ago
CVE-2023-50968	—	—	Apache OFBiz: Arbitrary file properties reading and SSRF attack	Dec 26, 2023 2y ago
CVE-2023-51656	—	—	Apache IoTDB: Unsafe deserialize map in Sync Tool	Dec 21, 2023 2y ago