Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

702

Newly disclosed

Feed last synced

15 hrs ago

Data freshness

Showing 301–330 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-1406	medium	5.1/10	lcg0124 BootDo Host Header AccessControlFilter.java redirectToLogin	Jan 25, 2026 5mo ago
CVE-2026-1191	medium	4.4/10	JavaScript Notifier <= 1.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings	Jan 24, 2026 5mo ago
CVE-2026-24474	medium	5.3/10	Dioxus Components has JavaScript injection via user-supplied IDs	Jan 23, 2026 5mo ago
CVE-2026-1126	medium	5.3/10	lwj flow SVG File FormResource.java uploadFile unrestricted upload	Jan 18, 2026 5mo ago
CVE-2026-1112	medium	5.3/10	Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization	Jan 18, 2026 5mo ago
CVE-2026-1111	medium	5.1/10	Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal	Jan 18, 2026 5mo ago
CVE-2026-1064	medium	5.1/10	bastillion-io Bastillion System Management SystemKtrl.java command injection	Jan 17, 2026 5mo ago
CVE-2026-1063	medium	5.1/10	bastillion-io Bastillion Public Key Management System AuthKeysKtrl.java command injection	Jan 17, 2026 5mo ago
CVE-2026-1062	medium	5.3/10	xiweicheng TMS HtmlUtil.java summary server-side request forgery	Jan 17, 2026 5mo ago
CVE-2026-1061	medium	5.3/10	xiweicheng TMS FileController.java upload unrestricted upload	Jan 17, 2026 5mo ago
CVE-2026-1050	medium	6.9/10	risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection	Jan 17, 2026 5mo ago
CVE-2026-0885	—	—	Use-after-free in the JavaScript: GC component	Jan 13, 2026 5mo ago
CVE-2026-0884	—	—	Use-after-free in the JavaScript Engine component	Jan 13, 2026 5mo ago
CVE-2026-0510	low	3.0/10	Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping	Jan 13, 2026 5mo ago
CVE-2025-69275	high	7.1/10	Spectrum outdated java library in class-path	Jan 12, 2026 5mo ago
CVE-2025-15499	high	8.7/10	Sangfor Operation and Maintenance Management System VersionController.java uploadCN os command injection	Jan 9, 2026 5mo ago
CVE-2025-15449	medium	5.3/10	cld378632668 JavaMall MinioController.java delete path traversal	Jan 5, 2026 5mo ago
CVE-2025-15448	medium	5.3/10	cld378632668 JavaMall MinioController.java upload unrestricted upload	Jan 5, 2026 5mo ago
CVE-2026-0574	medium	5.3/10	yeqifu warehouse Request UserController.java saveUserRole improper authorization	Jan 4, 2026 5mo ago
CVE-2026-21452	high	7.5/10	MessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation	Jan 2, 2026 5mo ago
CVE-2026-0571	medium	5.3/10	yeqifu warehouse AppFileUtils.java createResponseEntity path traversal	Jan 2, 2026 5mo ago
CVE-2025-15360	medium	5.1/10	newbee-mall-plus Product Information Edit UploadController.java upload unrestricted upload	Dec 30, 2025 5mo ago
CVE-2025-15251	medium	6.3/10	beecue FastBee SIP Message ReqAbstractHandler.java getRootElement xml external entity reference	Dec 30, 2025 5mo ago
CVE-2025-15222	low	2.3/10	Dromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserialization	Dec 30, 2025 5mo ago
CVE-2025-15221	medium	5.1/10	SohuTV CacheCloud AppDataMigrateController.java index cross site scripting	Dec 30, 2025 5mo ago
CVE-2025-15220	medium	5.3/10	SohuTV CacheCloud LoginController.java init cross site scripting	Dec 30, 2025 5mo ago
CVE-2025-15219	medium	5.1/10	SohuTV CacheCloud MachineManageController.java doPodList cross site scripting	Dec 30, 2025 5mo ago
CVE-2025-15204	medium	4.8/10	SohuTV CacheCloud QuartzManageController.java doQuartzList cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15203	medium	4.8/10	SohuTV CacheCloud ResourceController.java index cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15202	medium	4.8/10	SohuTV CacheCloud TaskController.java taskQueueList cross site scripting	Dec 29, 2025 6mo ago