Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,548

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

640

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1081–1110 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-44621	—	—	Apache Kylin: Command injection by Diagnosis Controller	Dec 30, 2022 3y ago
CVE-2022-43396	—	—	Apache Kylin: Command injection by Useless configuration	Dec 30, 2022 3y ago
CVE-2022-45347	—	—	Apache ShardingSphere-Proxy: MySQL authentication bypass	Dec 22, 2022 3y ago
CVE-2022-40145	—	—	Apache Karaf: JDBC JAAS LDAP injection	Dec 21, 2022 3y ago
CVE-2022-46421	—	—	Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params	Dec 20, 2022 3y ago
CVE-2022-40743	—	—	Apache Traffic Server: Security issues with the xdebug plugin	Dec 19, 2022 3y ago
CVE-2022-37392	—	—	Apache Traffic Server: Improperly reading the client requests	Dec 19, 2022 3y ago
CVE-2022-32749	—	—	Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins	Dec 19, 2022 3y ago
CVE-2022-47500	—	—	Apache Helix: Open redirect	Dec 19, 2022 3y ago
CVE-2022-46870	—	—	Apache Zeppelin: Stored XSS in note permissions	Dec 16, 2022 3y ago
CVE-2021-28655	—	—	Apache Zeppelin: Arbitrary file deletion vulnerability	Dec 16, 2022 3y ago
CVE-2022-32531	—	—	Apache BookKeeper: Java Client Uses Connection to Host that Failed Hostname Verification	Dec 15, 2022 3y ago
CVE-2022-34271	—	—	Apache Atlas: zip path traversal in import functionality	Dec 14, 2022 3y ago
CVE-2022-46364	—	—	Apache CXF SSRF Vulnerability	Dec 13, 2022 3y ago
CVE-2022-46363	—	—	Apache CXF directory listing / code exfiltration	Dec 13, 2022 3y ago
CVE-2022-45910	—	—	Apache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory Authorities	Dec 7, 2022 3y ago
CVE-2021-37533	—	—	Apache Commons Net's FTP client trusts the host from PASV response by default	Dec 3, 2022 3y ago
CVE-2022-46366	—	—	Apache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input	Dec 2, 2022 3y ago
CVE-2022-44635	—	—	Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal	Nov 29, 2022 3y ago
CVE-2022-45462	—	—	Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability	Nov 23, 2022 3y ago
CVE-2022-41131	—	—	Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)	Nov 22, 2022 3y ago
CVE-2022-40954	—	—	Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files	Nov 22, 2022 3y ago
CVE-2022-40189	—	—	Apache Airlfow Pig Provider RCE	Nov 22, 2022 3y ago
CVE-2022-38649	—	—	Apache Airflow Pinot provider allowed Command Injection	Nov 22, 2022 3y ago
CVE-2022-45470	—	—	Apache Hama allows XSS and information disclosure	Nov 21, 2022 3y ago
CVE-2022-45047	—	—	Apache MINA SSHD: Java unsafe deserialization vulnerability	Nov 16, 2022 3y ago
CVE-2022-45402	—	—	Apache Airflow: Open redirect during login	Nov 15, 2022 3y ago
CVE-2022-40309	—	—	Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories	Nov 15, 2022 3y ago
CVE-2022-40308	—	—	Apache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files	Nov 15, 2022 3y ago
CVE-2022-45378	—	—	Apache SOAP allows unauthenticated users to potentially invoke arbitrary code	Nov 14, 2022 3y ago