Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,669

All time

Critical · Active

10,549

CVSS ≥ 9.0

New · 14 days

711

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1231–1260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-30638	—	—	An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later	Apr 27, 2021 5y ago
CVE-2021-28125	—	—	Apache Superset Open Redirect	Apr 27, 2021 5y ago
CVE-2021-30245	—	—	Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks	Apr 15, 2021 5y ago
CVE-2021-29425	—	—	Possible limited path traversal vulnerabily in Apache Commons IO	Apr 13, 2021 5y ago
CVE-2021-29943	—	—	Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections	Apr 13, 2021 5y ago
CVE-2021-28657	—	—	Infinite loop in Apache Tika's MP3 parser	Mar 31, 2021 5y ago
CVE-2021-26919	—	—	Apache Druid Authenticated users can execute arbitrary code from malicious MySQL database systems.	Mar 30, 2021 5y ago
CVE-2020-1946	—	—	Apache SpamAssassin has an OS Command Injection vulnerability	Mar 25, 2021 5y ago
CVE-2021-26295	—	—	RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI	Mar 22, 2021 5y ago
CVE-2020-1936	—	—	Stored XSS in Apache Ambari	Mar 2, 2021 5y ago
CVE-2021-25122	—	—	Apache Tomcat h2c request mix-up	Mar 1, 2021 5y ago
CVE-2021-26544	—	—	Apache Livy (Incubating) is vulnerable to cross site scripting	Feb 20, 2021 5y ago
CVE-2021-26296	—	—	Cross-Site Request Forgery (CSRF) vulnerability in Apache MyFaces	Feb 19, 2021 5y ago
CVE-2021-26697	—	—	Apache Airflow: Lineage API endpoint for Experimental API missed authentication check	Feb 17, 2021 5y ago
CVE-2020-17532	—	—	Apache ServiceComb Yaml remote deserialization vulnerability	Jan 25, 2021 5y ago
CVE-2021-24122	—	—	Apache Tomcat information disclosure	Jan 14, 2021 5y ago
CVE-2020-13922	—	—	Apache DolphinScheduler (incubating) Permission vulnerability	Jan 11, 2021 5y ago
CVE-2020-11995	—	—	Apache Dubbo default deserialization protocol Hessian2 cause CRE	Jan 11, 2021 5y ago
CVE-2020-17519	—	—	Apache Flink directory traversal attack: reading remote files through the REST API	Jan 5, 2021 5y ago
CVE-2020-17518	—	—	Apache Flink directory traversal attack: remote file writing through the REST API	Jan 5, 2021 5y ago
CVE-2020-17533	—	—	Apache Accumulo Improper Handling of Insufficient Permissions	Dec 29, 2020 5y ago
CVE-2020-17529	—	—	Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP header	Dec 9, 2020 5y ago
CVE-2020-17528	—	—	Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length	Dec 9, 2020 5y ago
CVE-2020-17527	—	—	Apache Tomcat: Request header mix-up between HTTP/2 streams	Dec 3, 2020 5y ago
CVE-2020-13942	—	—	Remote Code Execution in Apache Unomi	Nov 24, 2020 5y ago
CVE-2020-13954	—	—	Apache CXF Reflected XSS in the services listing page via the styleSheetPath	Nov 12, 2020 5y ago
CVE-2020-10280	high	8.2/10	RVD#2568: Apache server is vulnerable to a DoS	Jun 24, 2020 6y ago
CVE-2019-0231	—	—	Apache MINA SSLFilter security Issue	Oct 1, 2019 6y ago
CVE-2018-12413	high	7.5/10	TIBCO Messaging - Apache Kafka Distribution - Schema Repository Vulnerable to CSRF Attacks	Nov 7, 2018 7y ago
CVE-2018-6488	high	8.1/10	MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance	Feb 22, 2018 8y ago