Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,051

All time

Critical · Active

12,083

CVSS ≥ 9.0

New · 14 days

2,565

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 1081–1110 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-48291	—	—	Apache Airflow: Improper access control to DAG resources	Dec 21, 2023 2y ago
CVE-2023-50783	—	—	Apache Airflow: Improper access control vulnerability on the "varimport" endpoint	Dec 21, 2023 2y ago
CVE-2023-47265	—	—	Apache Airflow: DAG Params alllow to embed unchecked Javascript	Dec 21, 2023 2y ago
CVE-2023-49920	—	—	Apache Airflow: Missing CSRF protection on DAG/trigger	Dec 21, 2023 2y ago
CVE-2023-37544	high	7.5/10	Apache Pulsar WebSocket Proxy: Improper Authentication for WebSocket Proxy Endpoint Allows DoS	Dec 20, 2023 2y ago
CVE-2023-43826	high	7.5/10	Apache Guacamole: Integer overflow in handling of VNC image buffers	Dec 19, 2023 2y ago
CVE-2023-49734	high	7.7/10	Apache Superset: Privilege Escalation Vulnerability	Dec 19, 2023 2y ago
CVE-2023-49736	medium	6.5/10	Apache Superset: SQL Injection on where_in JINJA macro	Dec 19, 2023 2y ago
CVE-2023-46104	medium	6.5/10	Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb	Dec 19, 2023 2y ago
CVE-2023-41314	—	—	Apache Doris: Missing API authentication allowed DoS	Dec 18, 2023 2y ago
CVE-2023-30867	—	—	Apache StreamPark (incubating): Authenticated system users could trigger SQL injection vulnerability	Dec 15, 2023 2y ago
CVE-2023-49898	—	—	Apache StreamPark (incubating): Authenticated system users could trigger remote command execution	Dec 15, 2023 2y ago
CVE-2023-46279	—	—	Apache Dubbo: Bypass deny serialize list check in Apache Dubbo	Dec 15, 2023 2y ago
CVE-2023-29234	—	—	Bypass serialize checks in Apache Dubbo	Dec 15, 2023 2y ago
CVE-2023-46750	—	—	Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro.	Dec 14, 2023 2y ago
CVE-2023-45725	—	—	Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents	Dec 13, 2023 2y ago
CVE-2023-50164	—	—	Apache Struts: File upload component had a directory traversal vulnerability	Dec 7, 2023 2y ago
CVE-2023-41835	—	—	Apache Struts: excessive disk usage	Dec 5, 2023 2y ago
CVE-2023-49070	—	—	Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present	Dec 5, 2023 2y ago
CVE-2023-49735	—	—	Apache Tiles: Unvalidated input may lead to path traversal and XXE	Nov 30, 2023 2y ago
CVE-2023-49733	—	—	Apache Cocoon's StreamGenerator is vulnerable to XXE injection	Nov 30, 2023 2y ago
CVE-2023-49620	—	—	Apache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for	Nov 30, 2023 2y ago
CVE-2022-45135	—	—	Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction	Nov 30, 2023 2y ago
CVE-2023-42504	medium	5.8/10	Apache Superset: Lack of rate limiting allows for possible denial of service	Nov 28, 2023 2y ago
CVE-2023-42505	medium	4.3/10	Apache Superset: Sensitive information disclosure on db connection details	Nov 28, 2023 2y ago
CVE-2023-42502	medium	4.8/10	Apache Superset: Open Redirect Vulnerability	Nov 28, 2023 2y ago
CVE-2023-46589	—	—	Apache Tomcat: HTTP request smuggling via malformed trailer headers	Nov 28, 2023 2y ago
CVE-2022-41678	—	—	Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE	Nov 28, 2023 2y ago
CVE-2023-49145	high	7.9/10	Apache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt	Nov 27, 2023 2y ago
CVE-2023-43701	medium	4.3/10	Apache Superset: Stored XSS on API endpoint	Nov 27, 2023 2y ago