Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,575

All time

Critical · Active

10,540

CVSS ≥ 9.0

New · 14 days

622

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1201–1230 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-42013	—	—	Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)	Oct 7, 2021 4y ago
CVE-2021-28129	—	—	DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid	Oct 7, 2021 4y ago
CVE-2021-41773	—	—	Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49	Oct 5, 2021 4y ago
CVE-2021-41616	—	—	Apache ddlutils 1.0 readobject vulnerability	Sep 30, 2021 4y ago
CVE-2021-36749	—	—	Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920)	Sep 24, 2021 4y ago
CVE-2021-38153	—	—	Timing Attack Vulnerability for Apache Kafka Connect and Clients	Sep 22, 2021 4y ago
CVE-2021-41303	—	—	Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass	Sep 17, 2021 4y ago
CVE-2021-41079	—	—	Apache Tomcat DoS with unexpected TLS packet	Sep 16, 2021 4y ago
CVE-2021-40146	—	—	A Remote Code Execution (RCE) vulnerability exists in Apache Any23 YAMLExtractor.java	Sep 11, 2021 4y ago
CVE-2021-38555	—	—	An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.java	Sep 11, 2021 4y ago
CVE-2021-38540	—	—	Apache Airflow: Variable Import endpoint missed authentication check	Sep 9, 2021 4y ago
CVE-2021-37579	—	—	Bypass deserialization checks in Apache Dubbo	Sep 9, 2021 4y ago
CVE-2021-25958	medium	6.5/10	Generation of Error Message Containing Sensitive Information in Apache OFBiz	Aug 30, 2021 4y ago
CVE-2021-36374	—	—	Apache Ant ZIP, and ZIP based, archive denial of service vulerability	Jul 14, 2021 4y ago
CVE-2021-36373	—	—	Apache Ant TAR archive denial of service vulnerability	Jul 14, 2021 4y ago
CVE-2021-36090	—	—	Apache Commons Compress 1.0 to 1.20 denial of service vulnerability	Jul 13, 2021 4y ago
CVE-2021-35517	—	—	Apache Commons Compress 1.1 to 1.20 denial of service vulnerability	Jul 13, 2021 4y ago
CVE-2021-35516	—	—	Apache Commons Compress 1.6 to 1.20 denial of service vulnerability	Jul 13, 2021 4y ago
CVE-2021-35515	—	—	Apache Commons Compress 1.6 to 1.20 denial of service vulnerability	Jul 13, 2021 4y ago
CVE-2021-30129	—	—	DoS/OOM leak vulnerability in Apache Mina SSHD Server	Jul 12, 2021 4y ago
CVE-2021-26920	—	—	Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended	Jul 2, 2021 4y ago
CVE-2021-30468	—	—	Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter	Jun 16, 2021 5y ago
CVE-2021-26691	—	—	Apache HTTP Server mod_session response handling heap overflow	Jun 10, 2021 5y ago
CVE-2021-30180	—	—	Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)	May 31, 2021 5y ago
CVE-2021-30179	—	—	Apache Dubbo Pre-auth RCE via Java deserialization in the Generic filter	May 31, 2021 5y ago
CVE-2021-30181	—	—	Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection)	May 29, 2021 5y ago
CVE-2021-31164	—	—	Apache Unomi log injection	May 4, 2021 5y ago
CVE-2021-28359	—	—	Apache Airflow Reflected XSS via Origin Query Argument in URL	May 2, 2021 5y ago
CVE-2021-30128	—	—	Unsafe deserialization in Apache OFBiz	Apr 27, 2021 5y ago
CVE-2021-29200	—	—	RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI	Apr 27, 2021 5y ago