Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,080

All time

Critical · Active

12,093

CVSS ≥ 9.0

New · 14 days

2,552

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 1471–1500 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-37579	—	—	Bypass deserialization checks in Apache Dubbo	Sep 9, 2021 4y ago
CVE-2021-25958	medium	6.5/10	Generation of Error Message Containing Sensitive Information in Apache OFBiz	Aug 30, 2021 4y ago
CVE-2021-36374	—	—	Apache Ant ZIP, and ZIP based, archive denial of service vulerability	Jul 14, 2021 5y ago
CVE-2021-36373	—	—	Apache Ant TAR archive denial of service vulnerability	Jul 14, 2021 5y ago
CVE-2021-36090	—	—	Apache Commons Compress 1.0 to 1.20 denial of service vulnerability	Jul 13, 2021 5y ago
CVE-2021-35517	—	—	Apache Commons Compress 1.1 to 1.20 denial of service vulnerability	Jul 13, 2021 5y ago
CVE-2021-35516	—	—	Apache Commons Compress 1.6 to 1.20 denial of service vulnerability	Jul 13, 2021 5y ago
CVE-2021-35515	—	—	Apache Commons Compress 1.6 to 1.20 denial of service vulnerability	Jul 13, 2021 5y ago
CVE-2021-30129	—	—	DoS/OOM leak vulnerability in Apache Mina SSHD Server	Jul 12, 2021 5y ago
CVE-2021-26920	—	—	Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended	Jul 2, 2021 5y ago
CVE-2021-30468	—	—	Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter	Jun 16, 2021 5y ago
CVE-2021-26691	—	—	Apache HTTP Server mod_session response handling heap overflow	Jun 10, 2021 5y ago
CVE-2021-30180	—	—	Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)	May 31, 2021 5y ago
CVE-2021-30179	—	—	Apache Dubbo Pre-auth RCE via Java deserialization in the Generic filter	May 31, 2021 5y ago
CVE-2021-30181	—	—	Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection)	May 29, 2021 5y ago
CVE-2021-31164	—	—	Apache Unomi log injection	May 4, 2021 5y ago
CVE-2021-28359	—	—	Apache Airflow Reflected XSS via Origin Query Argument in URL	May 2, 2021 5y ago
CVE-2021-30128	—	—	Unsafe deserialization in Apache OFBiz	Apr 27, 2021 5y ago
CVE-2021-29200	—	—	RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI	Apr 27, 2021 5y ago
CVE-2021-30638	—	—	An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later	Apr 27, 2021 5y ago
CVE-2021-28125	—	—	Apache Superset Open Redirect	Apr 27, 2021 5y ago
CVE-2021-30245	—	—	Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks	Apr 15, 2021 5y ago
CVE-2021-29425	—	—	Possible limited path traversal vulnerabily in Apache Commons IO	Apr 13, 2021 5y ago
CVE-2021-29943	—	—	Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections	Apr 13, 2021 5y ago
CVE-2021-28657	—	—	Infinite loop in Apache Tika's MP3 parser	Mar 31, 2021 5y ago
CVE-2021-26919	—	—	Apache Druid Authenticated users can execute arbitrary code from malicious MySQL database systems.	Mar 30, 2021 5y ago
CVE-2020-1946	—	—	Apache SpamAssassin has an OS Command Injection vulnerability	Mar 25, 2021 5y ago
CVE-2021-26295	—	—	RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI	Mar 22, 2021 5y ago
CVE-2020-1936	—	—	Stored XSS in Apache Ambari	Mar 2, 2021 5y ago
CVE-2021-25122	—	—	Apache Tomcat h2c request mix-up	Mar 1, 2021 5y ago