Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

705

Newly disclosed

Feed last synced

8 hrs ago

Data freshness

Showing 121–150 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-31379	—	—	Apache OFBiz: Path Traversal and File Upload Validation Bypass Leading to Arbitrary File Write, Stored XSS and RCE in Catalog Manager	May 19, 2026 1mo ago
CVE-2026-31378	—	—	Apache OFBiz: JSON Attribute Override and URL Allowlist Bypass Leads to Remote Code Execution	May 19, 2026 1mo ago
CVE-2026-29226	—	—	Apache OFBiz: Low-Privilege SSRF in Content Component	May 19, 2026 1mo ago
CVE-2026-29207	—	—	Apache OFBiz: Low-Privilege SSTI Leading to RCE in the Content Component	May 19, 2026 1mo ago
CVE-2026-29220	—	—	Apache OFBiz: Low-Privilege LFI in Content Component	May 19, 2026 1mo ago
CVE-2026-35194	—	—	Apache Flink: Remote code execution via SQL injection in code generation	May 15, 2026 1mo ago
CVE-2026-8503	—	—	Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids	May 15, 2026 1mo ago
CVE-2026-45205	—	—	Apache Commons Configuration: StackOverflowError for YAML input with cycles	May 14, 2026 1mo ago
CVE-2026-43515	—	—	Apache Tomcat: Security constraints not correctly applied	May 12, 2026 1mo ago
CVE-2026-43514	—	—	Apache Tomcat: AJP secret compared in non-constant time	May 12, 2026 1mo ago
CVE-2026-43513	—	—	Apache Tomcat: LockOutRealm treats user names as case-sensitive	May 12, 2026 1mo ago
CVE-2026-43512	—	—	Apache Tomcat: Digest authenticator will authenticate any unknown user	May 12, 2026 1mo ago
CVE-2026-41293	—	—	Apache Tomcat: HTTP/2 request headers not validated	May 12, 2026 1mo ago
CVE-2026-42498	—	—	Apache Tomcat: WebSocket authentication header exposure	May 12, 2026 1mo ago
CVE-2026-41284	—	—	Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling	May 12, 2026 1mo ago
CVE-2026-41018	—	—	Apache Airflow Providers Elasticsearch: Elasticsearch task-log handler leaks credentials embedded in the host URL	May 11, 2026 1mo ago
CVE-2026-43826	—	—	Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL	May 11, 2026 1mo ago
CVE-2026-6722	critical	9.5/10	Use-After-Free in SOAP using Apache map	May 10, 2026 1mo ago
CVE-2026-7262	low	2.9/10	NULL pointer dereference in SOAP apache:Map decoder with missing <value>	May 10, 2026 1mo ago
CVE-2026-39816	high	7.5/10	Apache NiFi: Missing Execute Code Required Permission on TinkerpopClientService	May 8, 2026 1mo ago
CVE-2026-25199	—	—	Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access	May 8, 2026 1mo ago
CVE-2026-25077	—	—	Apache CloudStack: Unauthenticated Command Injection in Direct Download Templates	May 8, 2026 1mo ago
CVE-2025-69233	medium	6.5/10	Apache CloudStack: Domain/account resources limits not honored	May 8, 2026 1mo ago
CVE-2025-66467	high	8.0/10	Apache CloudStack: MinIO policy remains intact on bucket deletion	May 8, 2026 1mo ago
CVE-2025-66172	—	—	Apache CloudStack: Any user can attach a volume in their VMs from backups they should not have access to	May 8, 2026 1mo ago
CVE-2025-66171	—	—	Apache CloudStack: Any user can create a new VM from backups they should not have access to	May 8, 2026 1mo ago
CVE-2025-66170	—	—	Apache CloudStack: Any user can list backups that they should not have access to	May 8, 2026 1mo ago
CVE-2013-10075	—	—	Apache::Session versions through 1.94 for Perl re-creates deleted sessions	May 8, 2026 1mo ago
CVE-2026-33844	critical	9.0/10	Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability	May 7, 2026 1mo ago
CVE-2026-33109	critical	9.9/10	Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability	May 7, 2026 1mo ago