Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,568

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1321–1350 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-24829	—	—	Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench	Jan 31, 2023 3y ago
CVE-2023-24830	—	—	Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization	Jan 30, 2023 3y ago
CVE-2023-22884	—	—	Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow	Jan 21, 2023 3y ago
CVE-2022-37436	—	—	Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting	Jan 17, 2023 3y ago
CVE-2022-36760	—	—	Apache HTTP Server: mod_proxy_ajp Possible request smuggling	Jan 17, 2023 3y ago
CVE-2006-20001	—	—	Apache HTTP Server: mod_dav out of bounds read, or write of zero byte	Jan 17, 2023 3y ago
CVE-2022-41703	—	—	Apache Superset: SQL injection vulnerability in adhoc clauses	Jan 16, 2023 3y ago
CVE-2022-45438	—	—	Apache Superset: Dashboard metadata information leak	Jan 16, 2023 3y ago
CVE-2022-43721	—	—	Apache Superset: Open Redirect Vulnerability	Jan 16, 2023 3y ago
CVE-2022-43720	—	—	Apache Superset: Improper rendering of user input	Jan 16, 2023 3y ago
CVE-2022-43719	—	—	Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API	Jan 16, 2023 3y ago
CVE-2022-43718	—	—	Apache Superset: Cross-Site Scripting vulnerability on upload forms	Jan 16, 2023 3y ago
CVE-2022-43717	—	—	Apache Superset: Cross-Site Scripting on dashboards	Jan 16, 2023 3y ago
CVE-2023-22602	—	—	Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP request	Jan 14, 2023 3y ago
CVE-2022-46769	—	—	Apache Sling App CMS: XSS in CMS Site Group Detail	Jan 9, 2023 3y ago
CVE-2022-45935	—	—	Apache James server: Temporary File Information Disclosure	Jan 6, 2023 3y ago
CVE-2022-45787	—	—	Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider	Jan 6, 2023 3y ago
CVE-2022-45875	—	—	Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin	Jan 4, 2023 3y ago
CVE-2022-45143	—	—	Apache Tomcat: JsonErrorReportValve escaping	Jan 3, 2023 3y ago
CVE-2022-44621	—	—	Apache Kylin: Command injection by Diagnosis Controller	Dec 30, 2022 3y ago
CVE-2022-43396	—	—	Apache Kylin: Command injection by Useless configuration	Dec 30, 2022 3y ago
CVE-2022-45347	—	—	Apache ShardingSphere-Proxy: MySQL authentication bypass	Dec 22, 2022 3y ago
CVE-2022-40145	—	—	Apache Karaf: JDBC JAAS LDAP injection	Dec 21, 2022 3y ago
CVE-2022-46421	—	—	Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params	Dec 20, 2022 3y ago
CVE-2022-40743	—	—	Apache Traffic Server: Security issues with the xdebug plugin	Dec 19, 2022 3y ago
CVE-2022-37392	—	—	Apache Traffic Server: Improperly reading the client requests	Dec 19, 2022 3y ago
CVE-2022-32749	—	—	Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins	Dec 19, 2022 3y ago
CVE-2022-47500	—	—	Apache Helix: Open redirect	Dec 19, 2022 3y ago
CVE-2022-46870	—	—	Apache Zeppelin: Stored XSS in note permissions	Dec 16, 2022 3y ago
CVE-2021-28655	—	—	Apache Zeppelin: Arbitrary file deletion vulnerability	Dec 16, 2022 3y ago