Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,552

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1351–1380 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-32531	—	—	Apache BookKeeper: Java Client Uses Connection to Host that Failed Hostname Verification	Dec 15, 2022 3y ago
CVE-2022-34271	—	—	Apache Atlas: zip path traversal in import functionality	Dec 14, 2022 3y ago
CVE-2022-46364	—	—	Apache CXF SSRF Vulnerability	Dec 13, 2022 3y ago
CVE-2022-46363	—	—	Apache CXF directory listing / code exfiltration	Dec 13, 2022 3y ago
CVE-2022-45910	—	—	Apache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory Authorities	Dec 7, 2022 3y ago
CVE-2021-37533	—	—	Apache Commons Net's FTP client trusts the host from PASV response by default	Dec 3, 2022 3y ago
CVE-2022-46366	—	—	Apache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input	Dec 2, 2022 3y ago
CVE-2022-44635	—	—	Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal	Nov 29, 2022 3y ago
CVE-2022-45462	—	—	Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability	Nov 23, 2022 3y ago
CVE-2022-41131	—	—	Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)	Nov 22, 2022 3y ago
CVE-2022-40954	—	—	Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files	Nov 22, 2022 3y ago
CVE-2022-40189	—	—	Apache Airlfow Pig Provider RCE	Nov 22, 2022 3y ago
CVE-2022-38649	—	—	Apache Airflow Pinot provider allowed Command Injection	Nov 22, 2022 3y ago
CVE-2022-45470	—	—	Apache Hama allows XSS and information disclosure	Nov 21, 2022 3y ago
CVE-2022-45047	—	—	Apache MINA SSHD: Java unsafe deserialization vulnerability	Nov 16, 2022 3y ago
CVE-2022-45402	—	—	Apache Airflow: Open redirect during login	Nov 15, 2022 3y ago
CVE-2022-40309	—	—	Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories	Nov 15, 2022 3y ago
CVE-2022-40308	—	—	Apache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files	Nov 15, 2022 3y ago
CVE-2022-45378	—	—	Apache SOAP allows unauthenticated users to potentially invoke arbitrary code	Nov 14, 2022 3y ago
CVE-2022-45136	—	—	Apache Jena SDB allows arbitrary deserialisation via JDBC	Nov 14, 2022 3y ago
CVE-2022-40127	—	—	Apache Airflow <2.4.0 has an RCE in a bash example	Nov 14, 2022 3y ago
CVE-2022-42920	—	—	Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing	Nov 7, 2022 3y ago
CVE-2022-37866	—	—	Apache Ivy allows path traversal in the presence of a malicious repository	Nov 7, 2022 3y ago
CVE-2022-37865	—	—	Apache Ivy allows creating/overwriting any file on the system	Nov 7, 2022 3y ago
CVE-2022-33684	—	—	Apache Pulsar C++/Python OAuth Clients prior to 3.0.0 were vulnerable to an MITM attack due to Disabled Certificate Validation	Nov 4, 2022 3y ago
CVE-2022-32287	—	—	Apache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archives	Nov 3, 2022 3y ago
CVE-2022-43985	—	—	Apache Airflow prior to 2.4.2 has an open redirect	Nov 2, 2022 3y ago
CVE-2022-43982	—	—	Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL	Nov 2, 2022 3y ago
CVE-2022-42252	—	—	Apache Tomcat request smuggling via malformed content-length	Nov 1, 2022 3y ago
CVE-2022-34662	—	—	Apache DolphinScheduler prior to 3.0.0 allows path traversal	Nov 1, 2022 3y ago