Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,561

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

640

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1141–1170 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-37022	—	—	Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11	Aug 31, 2022 3y ago
CVE-2022-37021	—	—	Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8.	Aug 31, 2022 3y ago
CVE-2021-25642	—	—	Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler	Aug 25, 2022 3y ago
CVE-2022-37401	—	—	Apache OpenOffice Weak Master Keys	Aug 13, 2022 3y ago
CVE-2022-37400	—	—	Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password	Aug 13, 2022 3y ago
CVE-2022-28732	—	—	Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin	Aug 4, 2022 3y ago
CVE-2022-28731	—	—	Apache JSPWiki CSRF in UserPreferences.jsp	Aug 4, 2022 3y ago
CVE-2022-28730	—	—	Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp	Aug 4, 2022 3y ago
CVE-2022-36364	—	—	Apache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vector	Jul 28, 2022 3y ago
CVE-2022-34169	—	—	Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets	Jul 19, 2022 3y ago
CVE-2022-35741	—	—	Apache CloudStack SAML Single Sign-On XXE	Jul 18, 2022 3y ago
CVE-2022-33891	—	—	Apache Spark shell command injection vulnerability via Spark UI	Jul 18, 2022 3y ago
CVE-2021-34538	—	—	Apache Hive Security vulnerability in Hive with UDFs	Jul 16, 2022 3y ago
CVE-2022-32533	—	—	Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues	Jul 6, 2022 3y ago
CVE-2022-33980	—	—	Apache Commons Configuration insecure interpolation defaults	Jul 6, 2022 3y ago
CVE-2021-33036	—	—	Apache Hadoop Privilege escalation vulnerability	Jun 15, 2022 4y ago
CVE-2022-29405	—	—	Apache Archiva Arbitrary user password reset vulnerability	May 25, 2022 4y ago
CVE-2022-26650	—	—	Apache ShenYu (incubating) Regular expression denial of service	May 17, 2022 4y ago
CVE-2022-30126	—	—	Apache Tika Regular Expression Denial of Service in Standards Extractor	May 16, 2022 4y ago
CVE-2022-23942	—	—	Apache Doris hardcoded cryptography initialization	Apr 26, 2022 4y ago
CVE-2022-24070	—	—	Apache Subversion mod_dav_svn is vulnerable to memory corruption	Apr 12, 2022 4y ago
CVE-2021-28544	—	—	Apache Subversion SVN authz protected copyfrom paths regression	Apr 12, 2022 4y ago
CVE-2022-25598	—	—	Apache DolphinScheduler user registration is vulnerable to ReDoS attacks	Mar 30, 2022 4y ago
CVE-2022-25757	—	—	Apache APISIX: the body_schema check in request-validation plugin can be bypassed	Mar 28, 2022 4y ago
CVE-2022-26779	—	—	Apache Cloudstack insecure random number generation affects project email invitation	Mar 15, 2022 4y ago
CVE-2022-22720	—	—	HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier	Mar 14, 2022 4y ago
CVE-2021-38296	—	—	Apache Spark Key Negotiation Vulnerability	Mar 10, 2022 4y ago
CVE-2021-45229	—	—	Apache Airflow: Reflected XSS via Origin Query Argument in URL	Feb 25, 2022 4y ago
CVE-2022-22931	—	—	Path traversal in Apache James 3.6.1	Feb 7, 2022 4y ago
CVE-2022-23913	—	—	Apache ActiveMQ Artemis DoS	Feb 4, 2022 4y ago