Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,552

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1441–1470 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-36738	—	—	XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet	Jan 6, 2022 4y ago
CVE-2021-40111	—	—	Apache James IMAP parsing Denial Of Service	Jan 4, 2022 4y ago
CVE-2021-40110	—	—	Apache James IMAP vulnerable to a ReDoS	Jan 4, 2022 4y ago
CVE-2021-38542	—	—	Apache James vulnerable to STARTTLS command injection (IMAP and POP3)	Jan 4, 2022 4y ago
CVE-2021-34797	—	—	Apache Geode project log file redaction of sensitive information vulnerability	Jan 4, 2022 4y ago
CVE-2021-44832	—	—	Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration	Dec 28, 2021 4y ago
CVE-2021-44548	—	—	Apache Solr information disclosure vulnerability through DataImportHandler	Dec 23, 2021 4y ago
CVE-2021-44224	—	—	Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier	Dec 20, 2021 4y ago
CVE-2021-41561	—	—	Apache Parquet-MR potential DoS in case of malicious Parquet file	Dec 20, 2021 4y ago
CVE-2021-44790	—	—	Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier	Dec 20, 2021 4y ago
CVE-2021-43083	—	—	Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response	Dec 19, 2021 4y ago
CVE-2021-45105	—	—	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation	Dec 18, 2021 4y ago
CVE-2021-44145	—	—	Apache NiFi information disclosure by XXE	Dec 17, 2021 4y ago
CVE-2021-45046	—	—	Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack	Dec 14, 2021 4y ago
CVE-2021-44228	—	—	Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints	Dec 10, 2021 4y ago
CVE-2021-37580	—	—	Apache ShenYu Admin bypass JWT authentication	Nov 16, 2021 4y ago
CVE-2021-41973	—	—	Apache MINA HTTP listener DOS	Nov 1, 2021 4y ago
CVE-2021-41186	medium	5.9/10	ReDoS vulnerability in parser_apache2	Oct 29, 2021 4y ago
CVE-2021-42009	—	—	Apache Traffic Control Traffic Ops Email Injection Vulnerability	Oct 12, 2021 4y ago
CVE-2021-42013	—	—	Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)	Oct 7, 2021 4y ago
CVE-2021-28129	—	—	DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid	Oct 7, 2021 4y ago
CVE-2021-41773	—	—	Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49	Oct 5, 2021 4y ago
CVE-2021-41616	—	—	Apache ddlutils 1.0 readobject vulnerability	Sep 30, 2021 4y ago
CVE-2021-36749	—	—	Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920)	Sep 24, 2021 4y ago
CVE-2021-38153	—	—	Timing Attack Vulnerability for Apache Kafka Connect and Clients	Sep 22, 2021 4y ago
CVE-2021-41303	—	—	Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass	Sep 17, 2021 4y ago
CVE-2021-41079	—	—	Apache Tomcat DoS with unexpected TLS packet	Sep 16, 2021 4y ago
CVE-2021-40146	—	—	A Remote Code Execution (RCE) vulnerability exists in Apache Any23 YAMLExtractor.java	Sep 11, 2021 4y ago
CVE-2021-38555	—	—	An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.java	Sep 11, 2021 4y ago
CVE-2021-38540	—	—	Apache Airflow: Variable Import endpoint missed authentication check	Sep 9, 2021 4y ago