Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,568

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1291–1320 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-25196	—	—	Apache Fineract: SQL injection vulnerability	Mar 28, 2023 3y ago
CVE-2023-25195	—	—	Apache Fineract: SSRF template type vulnerability in certain authenticated users	Mar 28, 2023 3y ago
CVE-2023-27296	—	—	Apache InLong: JDBC Deserialization Vulnerability in InLong	Mar 27, 2023 3y ago
CVE-2022-47502	—	—	Apache OpenOffice: Macro URL arbitrary script execution	Mar 24, 2023 3y ago
CVE-2022-38745	—	—	Apache OpenOffice: Empty entry in Java class path	Mar 24, 2023 3y ago
CVE-2023-28708	—	—	Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations	Mar 22, 2023 3y ago
CVE-2023-26513	high	7.5/10	Apache Sling Resource Merger: Requests to certain paths managed by the Apache Sling Resource Merger can lead to DoS	Mar 20, 2023 3y ago
CVE-2023-25695	—	—	Information disclosure in Apache Airflow	Mar 15, 2023 3y ago
CVE-2023-26464	—	—	Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender	Mar 10, 2023 3y ago
CVE-2023-27522	—	—	Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting	Mar 7, 2023 3y ago
CVE-2023-25690	—	—	Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy	Mar 7, 2023 3y ago
CVE-2023-25956	—	—	Apache Airflow AWS Provider: Arbitrary file read via AWS provider	Feb 24, 2023 3y ago
CVE-2023-25696	—	—	Apache Airflow Hive Provider Beeline RCE	Feb 24, 2023 3y ago
CVE-2023-25693	—	—	Sqoop Apache Airflow Provider Remote Code Execution Vulnerability	Feb 24, 2023 3y ago
CVE-2023-25692	—	—	Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service	Feb 24, 2023 3y ago
CVE-2023-25691	—	—	Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution	Feb 24, 2023 3y ago
CVE-2023-25621	—	—	Apache Sling does not allow to handle i18n content in a secure way	Feb 23, 2023 3y ago
CVE-2023-24998	—	—	Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts	Feb 20, 2023 3y ago
CVE-2023-25613	—	—	LDAP Injection Vulnerability in Apache Kerby	Feb 20, 2023 3y ago
CVE-2022-42735	—	—	Apache ShenYu Admin ultra vires	Feb 15, 2023 3y ago
CVE-2023-25141	—	—	JNDI injection into Apache sling-org-apache-sling-jcr-base	Feb 14, 2023 3y ago
CVE-2023-22832	—	—	Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes	Feb 10, 2023 3y ago
CVE-2023-25194	—	—	Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect	Feb 7, 2023 3y ago
CVE-2022-45786	—	—	Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection	Feb 4, 2023 3y ago
CVE-2023-22849	—	—	Apache Sling App CMS: XSS in CMS Reference / UI Components	Feb 4, 2023 3y ago
CVE-2023-24997	—	—	Apache InLong: Jdbc Connection Security Bypass	Feb 1, 2023 3y ago
CVE-2023-24977	—	—	Apache InLong: Jdbc Connection causes arbitrary file reading in InLong	Feb 1, 2023 3y ago
CVE-2022-28331	—	—	Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function	Jan 31, 2023 3y ago
CVE-2022-44644	—	—	Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability	Jan 31, 2023 3y ago
CVE-2022-44645	—	—	Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability	Jan 31, 2023 3y ago