Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,578

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1141–1170 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-42663	—	—	Apache Airflow: Bypass permission verification to view task instances of other dags	Oct 14, 2023 2y ago
CVE-2023-42792	—	—	Apache Airflow: Improper access control to DAG resources	Oct 14, 2023 2y ago
CVE-2023-45348	—	—	Apache Airflow: Configuration information leakage vulnerability	Oct 14, 2023 2y ago
CVE-2023-42780	—	—	Apache Airflow: Improper access control vulnerability in the "List dag warnings" feature	Oct 14, 2023 2y ago
CVE-2023-44981	—	—	Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication	Oct 11, 2023 2y ago
CVE-2023-45648	—	—	Apache Tomcat: Trailer header parsing too lenient	Oct 10, 2023 2y ago
CVE-2023-42795	—	—	Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests	Oct 10, 2023 2y ago
CVE-2023-42794	—	—	Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows	Oct 10, 2023 2y ago
CVE-2023-36419	high	8.8/10	Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability	Oct 10, 2023 2y ago
CVE-2023-39410	—	—	Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK	Sep 29, 2023 2y ago
CVE-2023-41834	—	—	Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences	Sep 19, 2023 2y ago
CVE-2023-41267	—	—	Apache HDFS Provider error message suggested installation of incorrect pip package	Sep 14, 2023 2y ago
CVE-2023-42503	—	—	Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file	Sep 14, 2023 2y ago
CVE-2023-41081	—	—	Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request	Sep 13, 2023 2y ago
CVE-2023-38156	high	7.2/10	Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability	Sep 12, 2023 2y ago
CVE-2023-40712	—	—	Apache Airflow: Secrets can be unmasked in the "Rendered Template"	Sep 12, 2023 2y ago
CVE-2023-40611	—	—	Apache Airflow Dag Runs Broken Access Control Vulnerability	Sep 12, 2023 2y ago
CVE-2023-32672	medium	4.3/10	Apache Superset: SQL parser edge case bypasses data access authorization	Sep 6, 2023 2y ago
CVE-2023-37941	medium	6.6/10	Apache Superset: Metadata db write access can lead to remote code execution	Sep 6, 2023 2y ago
CVE-2023-39265	low	3.8/10	Apache Superset: Possible Unauthorized Registration of SQLite Database Connections	Sep 6, 2023 2y ago
CVE-2023-39264	medium	4.3/10	Apache Superset: Stack traces enabled by default	Sep 6, 2023 2y ago
CVE-2023-27523	medium	5.0/10	Apache Superset: Improper data permission validation on Jinja templated queries	Sep 6, 2023 2y ago
CVE-2023-36388	medium	4.3/10	Apache Superset: Improper API permission for low privilege users allows for SSRF	Sep 6, 2023 2y ago
CVE-2023-27526	medium	4.3/10	Apache Superset: Improper Authorization check on import charts	Sep 6, 2023 2y ago
CVE-2023-36387	medium	5.4/10	Apache Superset: Improper API permission for low privilege users	Sep 6, 2023 2y ago
CVE-2023-40743	—	—	Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService	Sep 5, 2023 2y ago
CVE-2023-41180	—	—	Apache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++	Sep 3, 2023 2y ago
CVE-2023-40195	—	—	Apache Airflow Spark Provider Deserialization Vulnerability RCE	Aug 28, 2023 3y ago
CVE-2023-27604	—	—	Apache Airflow Sqoop Provider: Airflow Sqoop Provider RCE Vulnerability	Aug 28, 2023 3y ago
CVE-2023-41080	—	—	Apache Tomcat: Open redirect with FORM authentication	Aug 25, 2023 3y ago