Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,533

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

627

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1051–1080 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-42735	—	—	Apache ShenYu Admin ultra vires	Feb 15, 2023 3y ago
CVE-2023-25141	—	—	JNDI injection into Apache sling-org-apache-sling-jcr-base	Feb 14, 2023 3y ago
CVE-2023-22832	—	—	Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes	Feb 10, 2023 3y ago
CVE-2023-25194	—	—	Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect	Feb 7, 2023 3y ago
CVE-2022-45786	—	—	Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection	Feb 4, 2023 3y ago
CVE-2023-22849	—	—	Apache Sling App CMS: XSS in CMS Reference / UI Components	Feb 4, 2023 3y ago
CVE-2023-24997	—	—	Apache InLong: Jdbc Connection Security Bypass	Feb 1, 2023 3y ago
CVE-2023-24977	—	—	Apache InLong: Jdbc Connection causes arbitrary file reading in InLong	Feb 1, 2023 3y ago
CVE-2022-28331	—	—	Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function	Jan 31, 2023 3y ago
CVE-2022-44644	—	—	Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability	Jan 31, 2023 3y ago
CVE-2022-44645	—	—	Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability	Jan 31, 2023 3y ago
CVE-2023-24829	—	—	Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench	Jan 31, 2023 3y ago
CVE-2023-24830	—	—	Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization	Jan 30, 2023 3y ago
CVE-2023-22884	—	—	Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow	Jan 21, 2023 3y ago
CVE-2022-37436	—	—	Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting	Jan 17, 2023 3y ago
CVE-2022-36760	—	—	Apache HTTP Server: mod_proxy_ajp Possible request smuggling	Jan 17, 2023 3y ago
CVE-2006-20001	—	—	Apache HTTP Server: mod_dav out of bounds read, or write of zero byte	Jan 17, 2023 3y ago
CVE-2022-41703	—	—	Apache Superset: SQL injection vulnerability in adhoc clauses	Jan 16, 2023 3y ago
CVE-2022-45438	—	—	Apache Superset: Dashboard metadata information leak	Jan 16, 2023 3y ago
CVE-2022-43721	—	—	Apache Superset: Open Redirect Vulnerability	Jan 16, 2023 3y ago
CVE-2022-43720	—	—	Apache Superset: Improper rendering of user input	Jan 16, 2023 3y ago
CVE-2022-43719	—	—	Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API	Jan 16, 2023 3y ago
CVE-2022-43718	—	—	Apache Superset: Cross-Site Scripting vulnerability on upload forms	Jan 16, 2023 3y ago
CVE-2022-43717	—	—	Apache Superset: Cross-Site Scripting on dashboards	Jan 16, 2023 3y ago
CVE-2023-22602	—	—	Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP request	Jan 14, 2023 3y ago
CVE-2022-46769	—	—	Apache Sling App CMS: XSS in CMS Site Group Detail	Jan 9, 2023 3y ago
CVE-2022-45935	—	—	Apache James server: Temporary File Information Disclosure	Jan 6, 2023 3y ago
CVE-2022-45787	—	—	Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider	Jan 6, 2023 3y ago
CVE-2022-45875	—	—	Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin	Jan 4, 2023 3y ago
CVE-2022-45143	—	—	Apache Tomcat: JsonErrorReportValve escaping	Jan 3, 2023 3y ago