Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,548

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

640

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1111–1140 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-45136	—	—	Apache Jena SDB allows arbitrary deserialisation via JDBC	Nov 14, 2022 3y ago
CVE-2022-40127	—	—	Apache Airflow <2.4.0 has an RCE in a bash example	Nov 14, 2022 3y ago
CVE-2022-42920	—	—	Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing	Nov 7, 2022 3y ago
CVE-2022-37866	—	—	Apache Ivy allows path traversal in the presence of a malicious repository	Nov 7, 2022 3y ago
CVE-2022-37865	—	—	Apache Ivy allows creating/overwriting any file on the system	Nov 7, 2022 3y ago
CVE-2022-33684	—	—	Apache Pulsar C++/Python OAuth Clients prior to 3.0.0 were vulnerable to an MITM attack due to Disabled Certificate Validation	Nov 4, 2022 3y ago
CVE-2022-32287	—	—	Apache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archives	Nov 3, 2022 3y ago
CVE-2022-43985	—	—	Apache Airflow prior to 2.4.2 has an open redirect	Nov 2, 2022 3y ago
CVE-2022-43982	—	—	Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL	Nov 2, 2022 3y ago
CVE-2022-42252	—	—	Apache Tomcat request smuggling via malformed content-length	Nov 1, 2022 3y ago
CVE-2022-34662	—	—	Apache DolphinScheduler prior to 3.0.0 allows path traversal	Nov 1, 2022 3y ago
CVE-2022-31777	—	—	Apache Spark XSS vulnerability in log viewer UI Javascript	Nov 1, 2022 3y ago
CVE-2022-43766	—	—	Apache IoTDB prior to 0.13.3 allows DoS	Oct 26, 2022 3y ago
CVE-2022-42468	—	—	Apache Flume prior to 1.11.0 has an Improper Input Validation (JNDI Injection) in JMSSource	Oct 26, 2022 3y ago
CVE-2022-39944	—	—	The Apache Linkis JDBC EngineConn module has a RCE Vulnerability	Oct 26, 2022 3y ago
CVE-2022-42890	—	—	Apache Batik prior to 1.16 allows RCE via scripting	Oct 25, 2022 3y ago
CVE-2022-41704	—	—	Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input	Oct 25, 2022 3y ago
CVE-2022-34870	—	—	Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application	Oct 25, 2022 3y ago
CVE-2022-39198	—	—	Apache Dubbo Hession Deserialization Vulnerability Gadgets Bypass	Oct 18, 2022 3y ago
CVE-2022-42889	—	—	Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults	Oct 13, 2022 3y ago
CVE-2021-43980	—	—	Apache Tomcat: Information disclosure	Sep 28, 2022 3y ago
CVE-2022-40705	—	—	Apache SOAP: XML External Entity Injection (XXE) allows unauthenticated users to read arbitrary files via HTTP	Sep 22, 2022 3y ago
CVE-2022-40955	—	—	Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC	Sep 20, 2022 3y ago
CVE-2022-34917	—	—	Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers	Sep 20, 2022 3y ago
CVE-2022-39135	—	—	Apache Calcite: potential XEE attacks	Sep 11, 2022 3y ago
CVE-2022-29158	—	—	Regular Expression Denial of Service (ReDoS) vulnerability in Apache OFBiz	Sep 2, 2022 3y ago
CVE-2022-29063	—	—	Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz	Sep 2, 2022 3y ago
CVE-2022-25813	—	—	Server-Side Template Injection affecting the ecommerce plugin of Apache OFBiz	Sep 2, 2022 3y ago
CVE-2022-37435	—	—	Apache ShenYu Admin Improper Privilege Management	Sep 1, 2022 3y ago
CVE-2022-37023	—	—	Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11	Aug 31, 2022 3y ago