Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

701

Newly disclosed

Feed last synced

18 hrs ago

Data freshness

Showing 361–390 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-67505	high	8.4/10	Race condition in the Okta Java SDK	Dec 10, 2025 6mo ago
CVE-2025-66033	medium	5.3/10	Improper Memory Cleanup in the Okta Java SDK	Dec 10, 2025 6mo ago
CVE-2025-66214	high	7.0/10	Ladybug has an XMLDecoder Deserialization Vulnerability (Java RCE)	Dec 9, 2025 6mo ago
CVE-2025-14330	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Dec 9, 2025 6mo ago
CVE-2025-14325	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Dec 9, 2025 6mo ago
CVE-2025-14324	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Dec 9, 2025 6mo ago
CVE-2025-13426	high	8.7/10	Improper Sandboxing in Google Apigee's JavaCallout Policy Allows for Remote Code Execution	Dec 5, 2025 6mo ago
CVE-2025-66566	high	8.2/10	yawkat LZ4 Java has a possible information leak in Java safe decompressor	Dec 5, 2025 6mo ago
CVE-2025-13875	medium	5.3/10	Yohann0617 oci-helper OCI Configuration Upload OciServiceImpl.java addCfg path traversal	Dec 2, 2025 6mo ago
CVE-2025-13811	medium	5.3/10	jsnjfz WebStack-Guns PageFactory.java sql injection	Dec 1, 2025 6mo ago
CVE-2025-13810	medium	6.9/10	jsnjfz WebStack-Guns KaptchaController.java renderPicture path traversal	Dec 1, 2025 6mo ago
CVE-2025-13809	medium	5.3/10	orionsec orion-ops SSH Connection MachineInfoController.java server-side request forgery	Dec 1, 2025 6mo ago
CVE-2025-13808	medium	6.9/10	orionsec orion-ops User Profile UserController.java update improper authorization	Dec 1, 2025 6mo ago
CVE-2025-13807	medium	5.3/10	orionsec orion-ops API MachineKeyController.java MachineKeyController improper authorization	Dec 1, 2025 6mo ago
CVE-2025-13806	medium	6.9/10	nutzam NutzBoot Transaction API EthModule.java improper authorization	Dec 1, 2025 6mo ago
CVE-2025-13805	medium	6.3/10	nutzam NutzBoot LiteRpc-Serializer HttpServletRpcEndpoint.java getInputStream deserialization	Dec 1, 2025 6mo ago
CVE-2025-13804	medium	5.3/10	nutzam NutzBoot Ethereum Wallet EthModule.java information disclosure	Dec 1, 2025 6mo ago
CVE-2025-13791	medium	5.3/10	Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal	Nov 30, 2025 6mo ago
CVE-2025-12183	high	8.8/10	org.lz4:lz4-java - Out-of-Bounds Memory Access	Nov 28, 2025 7mo ago
CVE-2025-59302	—	—	Apache CloudStack: Potential remote code execution on Javascript engine defined rules	Nov 27, 2025 7mo ago
CVE-2025-66021	high	8.6/10	OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization	Nov 26, 2025 7mo ago
CVE-2025-65944	medium	5.1/10	Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`	Nov 25, 2025 7mo ago
CVE-2025-65108	critical	10.0/10	md-to-pdf is vulnerable to arbitrary JavaScript code execution when parsing front matter	Nov 21, 2025 7mo ago
CVE-2025-5092	medium	6.4/10	Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library	Nov 20, 2025 7mo ago
CVE-2025-13435	medium	6.3/10	Dreampie Resty HttpClient HttpClient.java request path traversal	Nov 20, 2025 7mo ago
CVE-2025-65026	medium	6.1/10	esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript	Nov 19, 2025 7mo ago
CVE-2025-64408	—	—	Apache Causeway: Java deserialization vulnerability to authenticated attackers	Nov 19, 2025 7mo ago
CVE-2025-13268	medium	5.3/10	Dromara dataCompare JDBC URL DbconfigServiceImpl.java DbConfig injection	Nov 17, 2025 7mo ago
CVE-2025-13266	medium	6.9/10	wwwlike vlife VLifeApi SysFileApi.java create path traversal	Nov 17, 2025 7mo ago
CVE-2025-13265	medium	5.3/10	lsfusion platform ZipUtils.java unpackFile path traversal	Nov 17, 2025 7mo ago