Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,578

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1171–1200 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-39441	—	—	Apache Airflow SMTP Provider, Apache Airflow IMAP Provider, Apache Airflow: SMTP/IMAP client components allowed MITM due to missing Certificate Validation	Aug 23, 2023 3y ago
CVE-2023-37379	—	—	Apache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature	Aug 23, 2023 3y ago
CVE-2023-40273	—	—	Session fixation in Apache Airflow web interface	Aug 23, 2023 3y ago
CVE-2022-44729	—	—	Apache XML Graphics Batik: Information disclosure vulnerability	Aug 22, 2023 3y ago
CVE-2022-44730	—	—	Apache XML Graphics Batik: Information disclosure vulnerability	Aug 22, 2023 3y ago
CVE-2022-46751	—	—	Apache Ivy: XML External Entity vulnerability in Apache Ivy	Aug 21, 2023 3y ago
CVE-2023-40037	—	—	Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs	Aug 18, 2023 3y ago
CVE-2023-40272	—	—	Apache Airflow Spark Provider Arbitrary File Read via JDBC	Aug 17, 2023 3y ago
CVE-2023-39553	—	—	Apache Airflow Drill Provider Arbitrary File Read Vulnerability	Aug 11, 2023 3y ago
CVE-2023-33934	—	—	Apache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies	Aug 9, 2023 3y ago
CVE-2022-47185	—	—	Apache Traffic Server: Invalid Range header causes a crash	Aug 9, 2023 3y ago
CVE-2023-36881	medium	4.5/10	Azure Apache Ambari Spoofing Vulnerability	Aug 8, 2023 3y ago
CVE-2023-36877	medium	4.5/10	Azure Apache Oozie Spoofing Vulnerability	Aug 8, 2023 3y ago
CVE-2023-38188	medium	4.5/10	Azure Apache Hadoop Spoofing Vulnerability	Aug 8, 2023 3y ago
CVE-2023-35393	medium	4.5/10	Azure Apache Hive Spoofing Vulnerability	Aug 8, 2023 3y ago
CVE-2023-37581	—	—	Apache Roller: Roller's weblog category, weblog settings and file-upload features did not properly sanitize input could be exploited to perform Reflected Cross Site Scripting (XSS) even on a Roller site configured for untrusted users.	Aug 6, 2023 3y ago
CVE-2023-39508	—	—	Apache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges	Aug 5, 2023 3y ago
CVE-2023-36542	—	—	Apache NiFi: Potential Code Injection with Properties Referencing Remote Resources	Jul 29, 2023 3y ago
CVE-2023-38647	—	—	Apache Helix: Deserialization vulnerability in Helix workflow and REST	Jul 26, 2023 3y ago
CVE-2023-38435	—	—	Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin	Jul 25, 2023 3y ago
CVE-2023-37895	—	—	Apache Jackrabbit RMI access can lead to RCE	Jul 25, 2023 3y ago
CVE-2023-35088	—	—	Apache InLong: SQL injection in audit endpoint	Jul 25, 2023 3y ago
CVE-2023-34434	—	—	Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param	Jul 25, 2023 3y ago
CVE-2023-34189	—	—	Apache InLong: General user can delete and update process	Jul 25, 2023 3y ago
CVE-2023-34478	—	—	Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests.	Jul 24, 2023 3y ago
CVE-2023-26512	—	—	Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data	Jul 17, 2023 3y ago
CVE-2023-37415	—	—	Apache Airflow Apache Hive Provider: Improper Input Validation in Hive Provider with proxy_user	Jul 13, 2023 3y ago
CVE-2022-45855	high	8.0/10	Apache Ambari: Allows authenticated metrics consumers to perform RCE	Jul 12, 2023 3y ago
CVE-2022-42009	high	8.0/10	Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application.	Jul 12, 2023 3y ago
CVE-2023-37582	—	—	Apache RocketMQ: Possible remote code execution when using the update configuration function	Jul 12, 2023 3y ago