Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,561

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

639

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1171–1200 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-41766	—	—	Insecure Java Deserialization in Apache Karaf	Jan 26, 2022 4y ago
CVE-2022-23945	—	—	Apache ShenYu missing authentication allows gateway registration	Jan 25, 2022 4y ago
CVE-2022-23944	—	—	Apache ShenYu 2.4.1 Improper access control	Jan 25, 2022 4y ago
CVE-2022-23223	—	—	Apache ShenYu Password leakage	Jan 25, 2022 4y ago
CVE-2021-45029	—	—	Apache ShenYu 2.4.1 Groovy Code Injection & SpEL Injection	Jan 25, 2022 4y ago
CVE-2022-23437	—	—	Infinite loop within Apache XercesJ xml parser	Jan 24, 2022 4y ago
CVE-2021-45230	—	—	Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver	Jan 20, 2022 4y ago
CVE-2022-23305	—	—	SQL injection in JDBC Appender in Apache Log4j V1	Jan 18, 2022 4y ago
CVE-2022-23302	—	—	Deserialization of untrusted data in JMSSink in Apache Log4j 1.x	Jan 18, 2022 4y ago
CVE-2021-42357	—	—	DOM based XSS Vulnerability in Apache Knox	Jan 17, 2022 4y ago
CVE-2021-31522	—	—	Apache Kylin unsafe class loading	Jan 6, 2022 4y ago
CVE-2021-36738	—	—	XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet	Jan 6, 2022 4y ago
CVE-2021-40111	—	—	Apache James IMAP parsing Denial Of Service	Jan 4, 2022 4y ago
CVE-2021-40110	—	—	Apache James IMAP vulnerable to a ReDoS	Jan 4, 2022 4y ago
CVE-2021-38542	—	—	Apache James vulnerable to STARTTLS command injection (IMAP and POP3)	Jan 4, 2022 4y ago
CVE-2021-34797	—	—	Apache Geode project log file redaction of sensitive information vulnerability	Jan 4, 2022 4y ago
CVE-2021-44832	—	—	Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration	Dec 28, 2021 4y ago
CVE-2021-44548	—	—	Apache Solr information disclosure vulnerability through DataImportHandler	Dec 23, 2021 4y ago
CVE-2021-44224	—	—	Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier	Dec 20, 2021 4y ago
CVE-2021-41561	—	—	Apache Parquet-MR potential DoS in case of malicious Parquet file	Dec 20, 2021 4y ago
CVE-2021-44790	—	—	Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier	Dec 20, 2021 4y ago
CVE-2021-43083	—	—	Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response	Dec 19, 2021 4y ago
CVE-2021-45105	—	—	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation	Dec 18, 2021 4y ago
CVE-2021-44145	—	—	Apache NiFi information disclosure by XXE	Dec 17, 2021 4y ago
CVE-2021-45046	—	—	Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack	Dec 14, 2021 4y ago
CVE-2021-44228	—	—	Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints	Dec 10, 2021 4y ago
CVE-2021-37580	—	—	Apache ShenYu Admin bypass JWT authentication	Nov 16, 2021 4y ago
CVE-2021-41973	—	—	Apache MINA HTTP listener DOS	Nov 1, 2021 4y ago
CVE-2021-41186	medium	5.9/10	ReDoS vulnerability in parser_apache2	Oct 29, 2021 4y ago
CVE-2021-42009	—	—	Apache Traffic Control Traffic Ops Email Injection Vulnerability	Oct 12, 2021 4y ago