Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,578

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1201–1230 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-22888	—	—	Apache Airflow: Scheduler remote DoS	Jul 12, 2023 3y ago
CVE-2023-36543	—	—	Apache Airflow: ReDoS via dags function	Jul 12, 2023 3y ago
CVE-2022-46651	—	—	Apache Airflow: Security vulnerability on AirFlow Connections	Jul 12, 2023 3y ago
CVE-2023-22887	—	—	Apache Airflow path traversal by authenticated user	Jul 12, 2023 3y ago
CVE-2023-35908	—	—	Apache Airflow: Access to DAGs without relevant permission	Jul 12, 2023 3y ago
CVE-2023-30428	high	8.2/10	Apache Pulsar Broker: Incorrect Authorization Validation for Rest Producer	Jul 12, 2023 3y ago
CVE-2023-30429	critical	9.6/10	Apache Pulsar: Incorrect Authorization for Function Worker when using mTLS Authentication through Pulsar Proxy	Jul 12, 2023 3y ago
CVE-2023-31007	—	0.0/10	Apache Pulsar: Broker does not always disconnect client when authentication data expires	Jul 12, 2023 3y ago
CVE-2023-37579	high	8.2/10	Apache Pulsar Function Worker: Incorrect Authorization for Function Worker Can Leak Sink/Source Credentials	Jul 12, 2023 3y ago
CVE-2023-32200	—	—	Apache Jena: Exposure of execution in script engine expressions.	Jul 12, 2023 3y ago
CVE-2023-34442	—	—	Apache Camel JIRA: Temporary file information disclosure in Camel-Jira	Jul 10, 2023 3y ago
CVE-2023-35887	medium	5.0/10	Apache MINA SSHD: Information disclosure bugs with RootedFilesystem	Jul 10, 2023 3y ago
CVE-2023-33008	—	—	Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale	Jul 7, 2023 3y ago
CVE-2023-34150	medium	6.5/10	Apache Any23: Possible excessive allocation of resources reading input.	Jul 5, 2023 3y ago
CVE-2023-35797	—	—	Apache Airflow Hive Provider Beeline RCE with Principal	Jul 3, 2023 3y ago
CVE-2023-22886	—	—	Apache Airflow JDBC Provider: RCE Vulnerability	Jun 29, 2023 3y ago
CVE-2023-35798	—	—	Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability	Jun 27, 2023 3y ago
CVE-2023-34395	—	—	Apache Airflow ODBC Provider: Remote code execution vulnerability	Jun 27, 2023 3y ago
CVE-2023-31469	—	—	Apache StreamPipes: Privilege escalation through non-admin user	Jun 23, 2023 3y ago
CVE-2023-34981	—	—	Apache Tomcat: AJP response header mix-up	Jun 21, 2023 3y ago
CVE-2023-34340	—	—	Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials	Jun 21, 2023 3y ago
CVE-2023-35005	—	—	Apache Airflow: Information disclosure on configuration view	Jun 19, 2023 3y ago
CVE-2023-34396	medium	4.3/10	Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms	Jun 14, 2023 3y ago
CVE-2023-34149	medium	4.3/10	Apache Struts: DoS via OOM owing to not properly checking of list bounds	Jun 14, 2023 3y ago
CVE-2023-30631	—	—	Apache Traffic Server: Configuration option to block the PUSH method in ATS didn't work	Jun 14, 2023 3y ago
CVE-2023-33933	—	—	Apache Traffic Server: s3_auth plugin problem with hash calculation	Jun 14, 2023 3y ago
CVE-2022-47184	—	—	Apache Traffic Server: The TRACE method can be use to disclose network information	Jun 14, 2023 3y ago
CVE-2023-34212	—	—	Apache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components	Jun 12, 2023 3y ago
CVE-2023-34468	—	—	Apache NiFi: Potential Code Injection with Database Services using H2	Jun 12, 2023 3y ago
CVE-2023-30576	medium	6.8/10	Apache Guacamole: Use-after-free in handling of RDP audio input buffer	Jun 7, 2023 3y ago