Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,578

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1111–1140 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-42501	medium	4.3/10	Apache Superset: Unnecessary read permissions within the Gamma role	Nov 27, 2023 2y ago
CVE-2023-40610	medium	6.3/10	Apache Superset: Privilege escalation with default examples database	Nov 27, 2023 2y ago
CVE-2023-49068	—	—	Apache DolphinScheduler: Information Leakage Vulnerability	Nov 27, 2023 2y ago
CVE-2023-6308	medium	6.3/10	Xiamen Four-Faith Video Surveillance Management System Apache Struts unrestricted upload	Nov 27, 2023 2y ago
CVE-2023-48796	—	—	Apache dolphinscheduler sensitive information disclosure	Nov 24, 2023 2y ago
CVE-2023-43123	—	—	Apache Storm: Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files	Nov 23, 2023 2y ago
CVE-2023-37924	—	—	Apache Submarine: SQL injection from unauthorized login	Nov 22, 2023 2y ago
CVE-2022-46337	—	—	Apache Derby: LDAP injection vulnerability in authenticator	Nov 20, 2023 2y ago
CVE-2023-46302	—	—	Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization	Nov 20, 2023 2y ago
CVE-2023-26031	—	—	Privilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems	Nov 16, 2023 2y ago
CVE-2023-42781	—	—	Apache Airflow: Permission verification bypass allows viewing dagruns of other dags	Nov 12, 2023 2y ago
CVE-2023-47037	—	—	Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)	Nov 12, 2023 2y ago
CVE-2023-39913	—	—	Apache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats	Nov 8, 2023 2y ago
CVE-2023-46819	—	—	Apache OFBiz: Execution of Solr plugin queries without authentication	Nov 7, 2023 2y ago
CVE-2023-46851	—	—	Apache Allura: sensitive information exposure via import	Nov 7, 2023 2y ago
CVE-2023-46215	—	—	Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend	Oct 28, 2023 2y ago
CVE-2023-46604	critical	10.0/10	Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack	Oct 27, 2023 2y ago
CVE-2023-46288	—	—	Apache Airflow: Sensitive parameters exposed in API when "non-sensitive-only" configuration is set	Oct 23, 2023 2y ago
CVE-2023-31122	—	—	Apache HTTP Server: mod_macro buffer over-read	Oct 23, 2023 2y ago
CVE-2023-43622	—	—	Apache HTTP Server: DoS in HTTP/2 with initial windows size 0	Oct 23, 2023 2y ago
CVE-2023-45802	—	—	Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST	Oct 23, 2023 2y ago
CVE-2023-44483	—	—	Apache Santuario: Private Key disclosure in debug-log output	Oct 20, 2023 2y ago
CVE-2023-46227	—	—	Apache inlong has an Arbitrary File Read Vulnerability	Oct 19, 2023 2y ago
CVE-2023-25753	—	—	Server-Side Request Forgery in Apache ShenYu	Oct 19, 2023 2y ago
CVE-2023-39456	—	—	Apache Traffic Server: Malformed http/2 frames can cause an abort	Oct 17, 2023 2y ago
CVE-2023-41752	—	—	Apache Traffic Server: s3_auth plugin problem with hash calculation	Oct 17, 2023 2y ago
CVE-2023-43666	—	—	Apache InLong: General user Unauthorized access User Management	Oct 16, 2023 2y ago
CVE-2023-43667	—	—	Apache InLong: Log Injection in Global functions	Oct 16, 2023 2y ago
CVE-2023-43668	—	—	Apache InLong: Jdbc Connection Security Bypass in InLong	Oct 16, 2023 2y ago
CVE-2023-45757	—	—	Apache bRPC: The builtin service rpcz page has an XSS attack vulnerability	Oct 16, 2023 2y ago