Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,568

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1261–1290 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-32007	—	—	Apache Spark: Shell command injection via Spark UI	May 2, 2023 3y ago
CVE-2022-46365	—	—	Apache StreamPark (incubating): Logic error causing any account reset	May 1, 2023 3y ago
CVE-2022-45801	—	—	Apache StreamPark (incubating): LDAP Injection Vulnerability	May 1, 2023 3y ago
CVE-2022-45802	—	—	Apache StreamPark (incubating): Upload any file to any directory	May 1, 2023 3y ago
CVE-2023-22665	—	—	Apache Jena: Exposure of arbitrary execution in script engine expressions.	Apr 25, 2023 3y ago
CVE-2023-30776	medium	4.9/10	Apache Superset: Database connection password leak	Apr 24, 2023 3y ago
CVE-2023-27524	high	8.9/10	Apache Superset: Session validation vulnerability when using provided default SECRET_KEY	Apr 24, 2023 3y ago
CVE-2023-25601	—	—	Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication	Apr 20, 2023 3y ago
CVE-2022-46302	high	8.8/10	Remote Code Execution with Root Privileges via Broad Apache Permissions	Apr 20, 2023 3y ago
CVE-2023-25504	medium	4.9/10	Apache Superset: Possible SSRF on import datasets	Apr 17, 2023 3y ago
CVE-2023-27525	low	3.1/10	Apache Superset: Incorrect default permissions for Gamma role	Apr 17, 2023 3y ago
CVE-2023-22946	medium	6.4/10	Apache Spark proxy-user privilege escalation from malicious configuration class	Apr 17, 2023 3y ago
CVE-2023-30771	—	—	Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench	Apr 17, 2023 3y ago
CVE-2023-24831	—	—	Apache IoTDB grafana-connector Login Bypass Vulnerability	Apr 17, 2023 3y ago
CVE-2022-47501	—	—	Apache OFBiz: Arbitrary file reading vulnerability	Apr 14, 2023 3y ago
CVE-2022-45064	high	8.0/10	Apache Sling Engine: Include-based XSS	Apr 13, 2023 3y ago
CVE-2023-30465	—	—	Apache InLong: SQL injection in apache inLong 1.5.0	Apr 11, 2023 3y ago
CVE-2023-29216	—	—	Apache Linkis DatasourceManager module has a deserialization command execution	Apr 10, 2023 3y ago
CVE-2023-27987	—	—	Apache Linkis gateway module token authentication bypass	Apr 10, 2023 3y ago
CVE-2023-27603	—	—	Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue	Apr 10, 2023 3y ago
CVE-2023-27602	—	—	Apache Linkis publicsercice module unrestricted upload of file	Apr 10, 2023 3y ago
CVE-2023-29215	—	—	Apache Linkis JDBC EngineCon has a deserialization command execution	Apr 10, 2023 3y ago
CVE-2023-28710	—	—	Apache Airflow Spark Provider Arbitrary File Read via JDBC	Apr 7, 2023 3y ago
CVE-2023-28706	—	—	Apache Airflow Hive Provider Beeline Remote Command Execution	Apr 7, 2023 3y ago
CVE-2023-28707	—	—	Airflow Apache Drill Provider Arbitrary File Read Vulnerability	Apr 7, 2023 3y ago
CVE-2023-26269	—	—	Apache James server: Privilege escalation through unauthenticated JMX	Apr 3, 2023 3y ago
CVE-2023-28935	—	—	Apache UIMA DUCC: DUCC (EOL) allows RCE	Mar 30, 2023 3y ago
CVE-2023-28158	medium	6.5/10	Apache Archiva privilege escalation	Mar 29, 2023 3y ago
CVE-2023-28326	—	—	Apache OpenMeetings: allows user impersonation	Mar 28, 2023 3y ago
CVE-2023-25197	—	—	apache fineract: SQL injection vulnerability in certain procedure calls	Mar 28, 2023 3y ago