Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,552

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1411–1440 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-33891	—	—	Apache Spark shell command injection vulnerability via Spark UI	Jul 18, 2022 4y ago
CVE-2021-34538	—	—	Apache Hive Security vulnerability in Hive with UDFs	Jul 16, 2022 4y ago
CVE-2022-32533	—	—	Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues	Jul 6, 2022 4y ago
CVE-2022-33980	—	—	Apache Commons Configuration insecure interpolation defaults	Jul 6, 2022 4y ago
CVE-2021-33036	—	—	Apache Hadoop Privilege escalation vulnerability	Jun 15, 2022 4y ago
CVE-2022-29405	—	—	Apache Archiva Arbitrary user password reset vulnerability	May 25, 2022 4y ago
CVE-2022-26650	—	—	Apache ShenYu (incubating) Regular expression denial of service	May 17, 2022 4y ago
CVE-2022-30126	—	—	Apache Tika Regular Expression Denial of Service in Standards Extractor	May 16, 2022 4y ago
CVE-2022-23942	—	—	Apache Doris hardcoded cryptography initialization	Apr 26, 2022 4y ago
CVE-2022-24070	—	—	Apache Subversion mod_dav_svn is vulnerable to memory corruption	Apr 12, 2022 4y ago
CVE-2021-28544	—	—	Apache Subversion SVN authz protected copyfrom paths regression	Apr 12, 2022 4y ago
CVE-2022-25598	—	—	Apache DolphinScheduler user registration is vulnerable to ReDoS attacks	Mar 30, 2022 4y ago
CVE-2022-25757	—	—	Apache APISIX: the body_schema check in request-validation plugin can be bypassed	Mar 28, 2022 4y ago
CVE-2022-26779	—	—	Apache Cloudstack insecure random number generation affects project email invitation	Mar 15, 2022 4y ago
CVE-2022-22720	—	—	HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier	Mar 14, 2022 4y ago
CVE-2021-38296	—	—	Apache Spark Key Negotiation Vulnerability	Mar 10, 2022 4y ago
CVE-2021-45229	—	—	Apache Airflow: Reflected XSS via Origin Query Argument in URL	Feb 25, 2022 4y ago
CVE-2022-22931	—	—	Path traversal in Apache James 3.6.1	Feb 7, 2022 4y ago
CVE-2022-23913	—	—	Apache ActiveMQ Artemis DoS	Feb 4, 2022 4y ago
CVE-2021-41766	—	—	Insecure Java Deserialization in Apache Karaf	Jan 26, 2022 4y ago
CVE-2022-23945	—	—	Apache ShenYu missing authentication allows gateway registration	Jan 25, 2022 4y ago
CVE-2022-23944	—	—	Apache ShenYu 2.4.1 Improper access control	Jan 25, 2022 4y ago
CVE-2022-23223	—	—	Apache ShenYu Password leakage	Jan 25, 2022 4y ago
CVE-2021-45029	—	—	Apache ShenYu 2.4.1 Groovy Code Injection & SpEL Injection	Jan 25, 2022 4y ago
CVE-2022-23437	—	—	Infinite loop within Apache XercesJ xml parser	Jan 24, 2022 4y ago
CVE-2021-45230	—	—	Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver	Jan 20, 2022 4y ago
CVE-2022-23305	—	—	SQL injection in JDBC Appender in Apache Log4j V1	Jan 18, 2022 4y ago
CVE-2022-23302	—	—	Deserialization of untrusted data in JMSSink in Apache Log4j 1.x	Jan 18, 2022 4y ago
CVE-2021-42357	—	—	DOM based XSS Vulnerability in Apache Knox	Jan 17, 2022 4y ago
CVE-2021-31522	—	—	Apache Kylin unsafe class loading	Jan 6, 2022 4y ago