Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,370

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,212

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 331–360 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-2947	medium	5.1/10	rymcu forest User Profile UserInfoController.java updateUserInfo cross site scripting	Feb 22, 2026 6mo ago
CVE-2026-2946	medium	5.1/10	rymcu forest Article Content/Comments/Portfolio XssUtils.java XssUtils.replaceHtmlCode cross site scripting	Feb 22, 2026 6mo ago
CVE-2026-2864	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm PictureController.java pictureDelete path traversal	Feb 21, 2026 6mo ago
CVE-2026-2863	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java deleteFile path traversal	Feb 21, 2026 6mo ago
CVE-2026-2860	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm EmployeeController.java improper authorization	Feb 21, 2026 6mo ago
CVE-2026-2852	medium	5.3/10	yeqifu warehouse Sales Endpoint SalesController.java deleteSales access control	Feb 20, 2026 6mo ago
CVE-2026-2851	medium	5.3/10	yeqifu warehouse Inport Endpoint InportController.java deleteInport access control	Feb 20, 2026 6mo ago
CVE-2026-2850	medium	5.3/10	yeqifu warehouse Customer Endpoint CustomerController.java deleteCustomer access control	Feb 20, 2026 6mo ago
CVE-2026-2849	medium	5.3/10	yeqifu warehouse Cache Sync CacheController.java syncCache access control	Feb 20, 2026 6mo ago
CVE-2025-68846	high	7.1/10	WordPress Asynchronous Javascript plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability	Feb 20, 2026 6mo ago
CVE-2026-25940	high	8.1/10	jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property)	Feb 19, 2026 6mo ago
CVE-2026-2676	medium	5.3/10	GoogTech sms-ssm API LoginInterceptor.java preHandle improper authorization	Feb 18, 2026 6mo ago
CVE-2026-2665	medium	5.3/10	huanzi-qch base-admin JSP Parser SysFileController.java upload unrestricted upload	Feb 18, 2026 6mo ago
CVE-2026-25500	medium	5.4/10	Rack's Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href	Feb 18, 2026 6mo ago
CVE-2026-2623	medium	5.3/10	Blossom File Upload BLOSManager.java put path traversal	Feb 17, 2026 6mo ago
CVE-2026-2622	medium	5.1/10	Blossom Article Title ArticleController.java content cross site scripting	Feb 17, 2026 6mo ago
CVE-2025-27898	medium	6.3/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 6mo ago
CVE-2025-27899	medium	5.3/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 6mo ago
CVE-2025-27900	medium	6.8/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 6mo ago
CVE-2025-27901	medium	6.5/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 6mo ago
CVE-2025-27903	medium	5.9/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 6mo ago
CVE-2025-27904	medium	6.5/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 6mo ago
CVE-2026-2557	medium	5.1/10	cskefu File Upload MediaController.java upload cross site scripting	Feb 16, 2026 6mo ago
CVE-2026-2556	medium	5.3/10	cskefu Endpoint MediaController.java server-side request forgery	Feb 16, 2026 6mo ago
CVE-2026-2555	low	2.3/10	JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization	Feb 16, 2026 6mo ago
CVE-2026-2549	medium	6.9/10	zhanghuanhao LibrarySystem 图书馆管理系统 BookController.java access control	Feb 16, 2026 6mo ago
CVE-2026-2536	medium	5.3/10	opencc JFlow Workflow WF_Admin_AttrFlow.java Imp_Done xml external entity reference	Feb 16, 2026 6mo ago
CVE-2025-33042	—	—	Apache Avro Java SDK: Code injection on Java generated code	Feb 13, 2026 6mo ago
CVE-2026-23686	low	3.4/10	CRLF Injection vulnerability in SAP NetWeaver Application Server Java	Feb 10, 2026 6mo ago
CVE-2026-2201	medium	4.8/10	ZeroWdd studentmanager LeaveController.java addLeave cross site scripting	Feb 9, 2026 6mo ago