Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,399

All time

Critical · Active

12,013

CVSS ≥ 9.0

New · 14 days

2,205

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 121–150 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-58162	critical	10.0/10	Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates	Jul 29, 2026 28d ago
CVE-2026-58161	high	7.5/10	Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server	Jul 29, 2026 28d ago
CVE-2026-59243	—	—	Apache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)	Jul 29, 2026 28d ago
CVE-2026-58160	medium	6.5/10	Apache Traffic Server: Out-of-bounds reads while parsing DNS responses	Jul 29, 2026 28d ago
CVE-2026-58159	high	8.2/10	Apache Traffic Server: Listener and ACL handling allow access-control bypass	Jul 29, 2026 28d ago
CVE-2026-58158	medium	5.9/10	Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow	Jul 29, 2026 28d ago
CVE-2026-58157	high	8.7/10	Apache Traffic Server: Improper server-session reuse can expose data across client connections	Jul 29, 2026 28d ago
CVE-2026-58153	high	8.3/10	Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely	Jul 29, 2026 28d ago
CVE-2026-58152	medium	5.9/10	Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory	Jul 29, 2026 28d ago
CVE-2026-58151	high	7.5/10	Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server	Jul 29, 2026 28d ago
CVE-2026-58150	critical	10.0/10	Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling	Jul 29, 2026 28d ago
CVE-2026-57834	critical	10.0/10	Apache Traffic Server: Malformed chunked message body allows request smuggling	Jul 29, 2026 28d ago
CVE-2026-33930	medium	5.9/10	Apache Traffic Server: Buffer overflow via Host field that has a long string value	Jul 29, 2026 28d ago
CVE-2026-24033	high	7.2/10	Apache Traffic Server: Request smuggling via chunked extension quoted-string parsing	Jul 29, 2026 28d ago
CVE-2026-33267	critical	10.0/10	Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata	Jul 29, 2026 28d ago
CVE-2026-22068	high	8.2/10	Apache Traffic Server: Regex mappings match with malicious domain names	Jul 29, 2026 28d ago
CVE-2026-41920	critical	9.3/10	Apache Traffic Server: SNI to Host header matching policy is not properly enforced	Jul 29, 2026 28d ago
CVE-2026-67178	high	7.8/10	Open Redirect in MISP Installer-Generated Apache Configuration	Jul 28, 2026 29d ago
CVE-2026-66299	—	—	Apache Tomcat: DoS via WebSocket chat example	Jul 28, 2026 29d ago
CVE-2026-66713	—	—	Apache Axis2/Java: deserialization of untrusted Data	Jul 28, 2026 29d ago
CVE-2026-59878	—	—	Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS	Jul 28, 2026 29d ago
CVE-2026-61487	—	—	Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations	Jul 28, 2026 29d ago
CVE-2026-66391	—	—	Apache Wicket: leaked and missing CSP headers	Jul 27, 2026 29d ago
CVE-2026-66390	—	—	Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence	Jul 27, 2026 29d ago
CVE-2026-66053	medium	5.9/10	Apache Thrift: Python TSSLSocket Hostname Matcher Import	Jul 27, 2026 1mo ago
CVE-2026-58662	high	8.7/10	Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass	Jul 27, 2026 1mo ago
CVE-2026-58389	high	8.7/10	Apache Thrift: Rust binary protocol non-strict path missing string size limit	Jul 27, 2026 1mo ago
CVE-2026-58023	medium	6.9/10	Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path	Jul 27, 2026 1mo ago
CVE-2026-55971	critical	9.3/10	Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()	Jul 27, 2026 1mo ago
CVE-2026-55970	medium	6.9/10	Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()	Jul 27, 2026 1mo ago