Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,568

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1231–1260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-30575	medium	6.5/10	Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths	Jun 7, 2023 3y ago
CVE-2023-32550	critical	9.3/10	Landscape's Apache server-status is accessible by default	Jun 6, 2023 3y ago
CVE-2023-33234	—	—	Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration	May 30, 2023 3y ago
CVE-2023-30601	high	7.8/10	Apache Cassandra: Privilege escalation when enabling FQL/Audit logs	May 30, 2023 3y ago
CVE-2022-46907	—	—	Apache JSPWiki: XSS Injection points in several plugins	May 25, 2023 3y ago
CVE-2023-33246	—	—	Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function	May 24, 2023 3y ago
CVE-2023-31062	—	—	Apache InLong: Privilege escalation vulnerability for InLong	May 22, 2023 3y ago
CVE-2023-31064	—	—	Apache InLong: Insecurity direct object references cancelling applications	May 22, 2023 3y ago
CVE-2023-31065	—	—	Apache InLong: Insufficient Session Expiration in InLong	May 22, 2023 3y ago
CVE-2023-31066	—	—	Apache InLong: Insecure direct object references for inlong sources	May 22, 2023 3y ago
CVE-2023-31098	—	—	Apache InLong: Weak Password Implementation in InLong	May 22, 2023 3y ago
CVE-2023-31101	—	—	Apache InLong: Users who joined later can see the data of deleted users	May 22, 2023 3y ago
CVE-2023-31103	—	—	Apache InLong: Attackers can change the immutable name and type of cluster	May 22, 2023 3y ago
CVE-2023-31206	—	—	Apache InLong: Attackers can change the immutable name and type of nodes	May 22, 2023 3y ago
CVE-2023-31453	—	—	Apache InLong: IDOR make users can delete others' subscription	May 22, 2023 3y ago
CVE-2023-31454	—	—	Apache InLong: IDOR make users can bind any cluster	May 22, 2023 3y ago
CVE-2023-31058	—	—	Apache InLong: JDBC URL bypassing by adding blanks	May 22, 2023 3y ago
CVE-2023-28709	—	—	Apache Tomcat: Fix for CVE-2023-24998 is incomplete	May 22, 2023 3y ago
CVE-2022-47937	—	—	Multiple parsing problems in the Apache Sling Commons JSON module	May 15, 2023 3y ago
CVE-2023-28936	—	—	Apache OpenMeetings: insufficient check of invitation hash	May 12, 2023 3y ago
CVE-2023-29032	—	—	Apache OpenMeetings: allows bypass authentication	May 12, 2023 3y ago
CVE-2023-29246	—	—	Apache OpenMeetings: allows null-byte Injection	May 12, 2023 3y ago
CVE-2023-25754	—	—	Apache Airflow: Privilege escalation using airflow logs	May 8, 2023 3y ago
CVE-2023-29247	—	—	Stored XSS on Apache Airflow	May 8, 2023 3y ago
CVE-2023-31039	—	—	Apache bRPC: ServerOptions.pid_file may cause arbitrary code execution	May 8, 2023 3y ago
CVE-2023-31038	—	—	Apache Log4cxx: SQL injection when using ODBC appender	May 8, 2023 3y ago
CVE-2021-40331	—	—	Permissions problem in the Apache Ranger Hive Plugin	May 5, 2023 3y ago
CVE-2022-45048	high	8.4/10	Apache Ranger: code execution vulnerability in policy expressions	May 5, 2023 3y ago
CVE-2023-26268	medium	4.4/10	Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes	May 2, 2023 3y ago
CVE-2023-31207	medium	4.4/10	Automation user secret logged to Apache access log	May 2, 2023 3y ago