Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,369

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,211

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 271–300 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-3966	medium	5.3/10	648540858 wvp-GB28181-pro IP Address ABLMediaNodeServerService.java getDownloadFilePath server-side request forgery	Mar 12, 2026 5mo ago
CVE-2026-3963	medium	6.3/10	perfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key	Mar 11, 2026 5mo ago
CVE-2026-32117	high	7.6/10	grafanacubism-panel : Stored XSS via javascript: URL in panel zoom link (Editor → Viewer)	Mar 11, 2026 5mo ago
CVE-2026-3957	medium	5.1/10	xierongwkhd weimai-wetapp Endpoint HomeController.java getLikeMovieList sql injection	Mar 11, 2026 5mo ago
CVE-2026-3956	medium	5.1/10	xierongwkhd weimai-wetapp Admin_AdminUserController.java getAdmins sql injection	Mar 11, 2026 5mo ago
CVE-2026-32109	low	3.7/10	Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`	Mar 11, 2026 5mo ago
CVE-2026-31809	medium	6.4/10	SiYuan has a SVG Sanitizer Bypass via Whitespace in `javascript:` URI — Unauthenticated XSS	Mar 10, 2026 5mo ago
CVE-2026-30974	medium	4.6/10	Copyparty volflag `nohtml` did not block javascript in svg files	Mar 10, 2026 5mo ago
CVE-2026-3813	medium	5.3/10	opencc JFlow WF_CCForm.java Calculate injection	Mar 9, 2026 5mo ago
CVE-2026-3797	medium	5.3/10	Tiandy Video Surveillance System 视频监控平台 CLS_REST_File.java uploadFile unrestricted upload	Mar 9, 2026 5mo ago
CVE-2026-3789	medium	5.3/10	Bytedesk SpringAIGiteeRestController SpringAIGiteeRestService.java getModels server-side request forgery	Mar 8, 2026 5mo ago
CVE-2026-3788	medium	5.3/10	Bytedesk SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels server-side request forgery	Mar 8, 2026 5mo ago
CVE-2026-3750	medium	5.1/10	ContiNew Admin Storage Management S3ClientFactory.java URI.create server-side request forgery	Mar 8, 2026 5mo ago
CVE-2026-3749	medium	5.3/10	Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted upload	Mar 8, 2026 5mo ago
CVE-2026-3748	medium	5.3/10	Bytedesk SVG File UploadRestController.java uploadFile unrestricted upload	Mar 8, 2026 5mo ago
CVE-2026-3733	medium	5.3/10	xuxueli xxl-job JobInfoController.java server-side request forgery	Mar 8, 2026 5mo ago
CVE-2026-3725	medium	5.3/10	1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine	Mar 8, 2026 5mo ago
CVE-2026-3721	medium	5.1/10	1024-lab/lab1024 SmartAdmin Help Documentation HelpDocAddForm.java cross site scripting	Mar 8, 2026 5mo ago
CVE-2026-29779	high	7.5/10	UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle	Mar 7, 2026 5mo ago
CVE-2026-30238	medium	5.1/10	Group-Office: Reflected XSS in JavaScript context	Mar 6, 2026 5mo ago
CVE-2026-29183	critical	9.3/10	SiYuan: Unauthenticated reflected SVG XSS in `/api/icon/getDynamicIcon` (`type=8`) enables arbitrary JavaScript execution	Mar 6, 2026 5mo ago
CVE-2026-28393	high	8.3/10	OpenClaw 2.0.0-beta3 < 2026.2.14 - Arbitrary JavaScript Module Loading via Hook Transform Path Traversal	Mar 5, 2026 5mo ago
CVE-2026-3404	low	2.3/10	thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference	Mar 2, 2026 5mo ago
CVE-2026-3293	medium	4.8/10	snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos	Feb 27, 2026 5mo ago
CVE-2026-3289	medium	5.3/10	Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal	Feb 27, 2026 5mo ago
CVE-2026-3287	medium	5.3/10	youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection	Feb 27, 2026 5mo ago
CVE-2026-3286	medium	5.3/10	itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery	Feb 27, 2026 6mo ago
CVE-2026-3270	medium	5.3/10	psi-probe PSI Probe Whois Whois.java lookup server-side request forgery	Feb 26, 2026 6mo ago
CVE-2026-3269	medium	5.3/10	psi-probe PSI Probe Session ExpireSessionsController.java handleRequestInternal denial of service	Feb 26, 2026 6mo ago
CVE-2026-3268	medium	5.3/10	psi-probe PSI Probe Session Attribute RemoveSessAttributeController.java access control	Feb 26, 2026 6mo ago