Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

702

Newly disclosed

Feed last synced

17 hrs ago

Data freshness

Showing 331–360 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-15201	medium	5.1/10	SohuTV CacheCloud WebResourceController.java redirectNoPower cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15200	medium	4.8/10	SohuTV CacheCloud AppClientDataShowController.java doIndex cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15175	medium	5.1/10	SohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15174	medium	5.1/10	SohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15173	medium	5.1/10	SohuTV CacheCloud InstanceController.java advancedAnalysis cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15172	medium	5.1/10	SohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15171	medium	5.1/10	SohuTV CacheCloud ServerController.java index cross site scripting	Dec 29, 2025 6mo ago
CVE-2025-15152	medium	5.3/10	h-moses moga-mall PmsProductController.java addProduct unrestricted upload	Dec 28, 2025 6mo ago
CVE-2025-15149	medium	4.8/10	rawchen ecms Add New Product updateProductServlet.java updateProductServlet cross site scripting	Dec 28, 2025 6mo ago
CVE-2025-15146	medium	4.8/10	SohuTV CacheCloud UserManageController.java doUserList cross site scripting	Dec 28, 2025 6mo ago
CVE-2025-15145	medium	4.8/10	SohuTV CacheCloud TotalManageController.java doTotalList cross site scripting	Dec 28, 2025 6mo ago
CVE-2025-15135	medium	5.3/10	joey-zhou xiaozhi-esp32-server-java Cookie AuthenticationInterceptor.java tryAuthenticateWithCookies improper authentication	Dec 28, 2025 6mo ago
CVE-2025-15134	medium	5.1/10	yourmaileyes MOOC Submission MainController.java subreview cross site scripting	Dec 28, 2025 6mo ago
CVE-2025-15117	low	2.3/10	Dromara Sa-Token SaJdkSerializer.java ObjectInputStream.readObject deserialization	Dec 28, 2025 6mo ago
CVE-2025-15094	medium	5.3/10	sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting	Dec 26, 2025 6mo ago
CVE-2025-15093	medium	5.3/10	sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting	Dec 26, 2025 6mo ago
CVE-2025-15087	medium	5.3/10	youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization	Dec 25, 2025 6mo ago
CVE-2025-15086	medium	5.3/10	youlaitech youlai-mall MemberController.java getMemberByMobile access control	Dec 25, 2025 6mo ago
CVE-2025-15085	medium	5.3/10	youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization	Dec 25, 2025 6mo ago
CVE-2025-15084	low	2.3/10	youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control	Dec 25, 2025 6mo ago
CVE-2025-14965	medium	5.1/10	1541492390c yougou-mall ResourceController.java delete path traversal	Dec 19, 2025 6mo ago
CVE-2025-14909	medium	5.3/10	JeecgBoot SysUserOnlineController.java SysUserOnlineController user session	Dec 19, 2025 6mo ago
CVE-2025-14908	medium	5.3/10	JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication	Dec 19, 2025 6mo ago
CVE-2025-14674	medium	5.3/10	aizuda snail-job QLExpressEngine.java QLExpressEngine.doEval injection	Dec 14, 2025 6mo ago
CVE-2025-67721	medium	6.3/10	Aircompressor's Snappy and LZ4 Java-based decompressor implementation can leak information from reused output buffer	Dec 12, 2025 6mo ago
CVE-2025-67734	medium	5.1/10	Frappe Authenticated Users can Execute JavaScript through its Job Form	Dec 12, 2025 6mo ago
CVE-2025-14538	medium	5.1/10	yangshare warehouseManager 仓库管理系统 CustomerManageHandler.java addCustomer cross site scripting	Dec 11, 2025 6mo ago
CVE-2025-14531	medium	5.3/10	code-projects Rental Management System Log Transaction.java crlf injection	Dec 11, 2025 6mo ago
CVE-2025-14518	medium	5.3/10	PowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgery	Dec 11, 2025 6mo ago
CVE-2025-14516	medium	5.3/10	Yalantis uCrop URL com.yalantis.ucrop.task.BitmapLoadTask.java downloadFile server-side request forgery	Dec 11, 2025 6mo ago