Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,552

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1381–1410 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-31777	—	—	Apache Spark XSS vulnerability in log viewer UI Javascript	Nov 1, 2022 3y ago
CVE-2022-43766	—	—	Apache IoTDB prior to 0.13.3 allows DoS	Oct 26, 2022 3y ago
CVE-2022-42468	—	—	Apache Flume prior to 1.11.0 has an Improper Input Validation (JNDI Injection) in JMSSource	Oct 26, 2022 3y ago
CVE-2022-39944	—	—	The Apache Linkis JDBC EngineConn module has a RCE Vulnerability	Oct 26, 2022 3y ago
CVE-2022-42890	—	—	Apache Batik prior to 1.16 allows RCE via scripting	Oct 25, 2022 3y ago
CVE-2022-41704	—	—	Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input	Oct 25, 2022 3y ago
CVE-2022-34870	—	—	Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application	Oct 25, 2022 3y ago
CVE-2022-39198	—	—	Apache Dubbo Hession Deserialization Vulnerability Gadgets Bypass	Oct 18, 2022 3y ago
CVE-2022-42889	—	—	Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults	Oct 13, 2022 3y ago
CVE-2021-43980	—	—	Apache Tomcat: Information disclosure	Sep 28, 2022 3y ago
CVE-2022-40705	—	—	Apache SOAP: XML External Entity Injection (XXE) allows unauthenticated users to read arbitrary files via HTTP	Sep 22, 2022 3y ago
CVE-2022-40955	—	—	Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC	Sep 20, 2022 3y ago
CVE-2022-34917	—	—	Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers	Sep 20, 2022 3y ago
CVE-2022-39135	—	—	Apache Calcite: potential XEE attacks	Sep 11, 2022 3y ago
CVE-2022-29158	—	—	Regular Expression Denial of Service (ReDoS) vulnerability in Apache OFBiz	Sep 2, 2022 3y ago
CVE-2022-29063	—	—	Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz	Sep 2, 2022 3y ago
CVE-2022-25813	—	—	Server-Side Template Injection affecting the ecommerce plugin of Apache OFBiz	Sep 2, 2022 3y ago
CVE-2022-37435	—	—	Apache ShenYu Admin Improper Privilege Management	Sep 1, 2022 3y ago
CVE-2022-37023	—	—	Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11	Aug 31, 2022 3y ago
CVE-2022-37022	—	—	Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11	Aug 31, 2022 3y ago
CVE-2022-37021	—	—	Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8.	Aug 31, 2022 3y ago
CVE-2021-25642	—	—	Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler	Aug 25, 2022 4y ago
CVE-2022-37401	—	—	Apache OpenOffice Weak Master Keys	Aug 13, 2022 4y ago
CVE-2022-37400	—	—	Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password	Aug 13, 2022 4y ago
CVE-2022-28732	—	—	Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin	Aug 4, 2022 4y ago
CVE-2022-28731	—	—	Apache JSPWiki CSRF in UserPreferences.jsp	Aug 4, 2022 4y ago
CVE-2022-28730	—	—	Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp	Aug 4, 2022 4y ago
CVE-2022-36364	—	—	Apache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vector	Jul 28, 2022 4y ago
CVE-2022-34169	—	—	Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets	Jul 19, 2022 4y ago
CVE-2022-35741	—	—	Apache CloudStack SAML Single Sign-On XXE	Jul 18, 2022 4y ago