Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,369

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,211

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 301–330 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-27495	critical	9.4/10	n8n has a Sandbox Escape in its JavaScript Task Runner	Feb 25, 2026 6mo ago
CVE-2026-27727	high	8.9/10	mchange-commons-java: Remote Code Execution via JNDI Reference Resolution	Feb 25, 2026 6mo ago
CVE-2026-27701	high	8.8/10	LiveCodes vulnerable to JavaScript Injection via untrusted PR title in i18n-update-pull workflow	Feb 25, 2026 6mo ago
CVE-2026-2804	—	—	Use-after-free in the JavaScript: WebAssembly component	Feb 24, 2026 6mo ago
CVE-2026-2802	—	—	Race condition in the JavaScript: GC component	Feb 24, 2026 6mo ago
CVE-2026-2801	—	—	Incorrect boundary conditions in the JavaScript: WebAssembly component	Feb 24, 2026 6mo ago
CVE-2026-2797	—	—	Use-after-free in the JavaScript: GC component	Feb 24, 2026 6mo ago
CVE-2026-2796	—	—	JIT miscompilation in the JavaScript: WebAssembly component	Feb 24, 2026 6mo ago
CVE-2026-2795	—	—	Use-after-free in the JavaScript: GC component	Feb 24, 2026 6mo ago
CVE-2026-2786	—	—	Use-after-free in the JavaScript Engine component	Feb 24, 2026 6mo ago
CVE-2026-2785	—	—	Invalid pointer in the JavaScript Engine component	Feb 24, 2026 6mo ago
CVE-2026-2783	—	—	Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component	Feb 24, 2026 6mo ago
CVE-2026-2767	—	—	Use-after-free in the JavaScript: WebAssembly component	Feb 24, 2026 6mo ago
CVE-2026-2766	—	—	Use-after-free in the JavaScript Engine: JIT component	Feb 24, 2026 6mo ago
CVE-2026-2765	—	—	Use-after-free in the JavaScript Engine component	Feb 24, 2026 6mo ago
CVE-2026-2764	—	—	JIT miscompilation, use-after-free in the JavaScript Engine: JIT component	Feb 24, 2026 6mo ago
CVE-2026-2763	—	—	Use-after-free in the JavaScript Engine component	Feb 24, 2026 6mo ago
CVE-2026-2762	—	—	Integer overflow in the JavaScript: Standard Library component	Feb 24, 2026 6mo ago
CVE-2026-2758	—	—	Use-after-free in the JavaScript: GC component	Feb 24, 2026 6mo ago
CVE-2026-3067	medium	5.3/10	HummerRisk Archive Extraction CommandUtils.java extractZip path traversal	Feb 24, 2026 6mo ago
CVE-2026-3066	medium	5.3/10	HummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection	Feb 24, 2026 6mo ago
CVE-2026-3065	medium	5.3/10	HummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection	Feb 24, 2026 6mo ago
CVE-2026-3064	medium	5.3/10	HummerRisk Cloud Task Scheduler ResourceCreateService.java command injection	Feb 24, 2026 6mo ago
CVE-2026-3053	medium	6.9/10	DataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authentication	Feb 24, 2026 6mo ago
CVE-2026-3052	medium	5.3/10	DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery	Feb 24, 2026 6mo ago
CVE-2026-3051	medium	5.3/10	DataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal	Feb 24, 2026 6mo ago
CVE-2026-3028	medium	5.3/10	erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting	Feb 23, 2026 6mo ago
CVE-2026-2985	medium	5.3/10	Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery	Feb 23, 2026 6mo ago
CVE-2026-2972	medium	4.8/10	a466350665 Smart-SSO Role Edit UserController.java save cross site scripting	Feb 23, 2026 6mo ago
CVE-2026-2957	medium	5.3/10	qinming99 dst-admin File BackupController.java deleteBackup denial of service	Feb 22, 2026 6mo ago