Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

700

Newly disclosed

Feed last synced

19 hrs ago

Data freshness

Showing 391–420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-13262	medium	6.9/10	lsfusion platform UploadFileRequestHandler.java UploadFileRequestHandler path traversal	Nov 17, 2025 7mo ago
CVE-2025-13261	medium	6.9/10	lsfusion platform DownloadFileRequestHandler.java DownloadFileRequestHandler path traversal	Nov 17, 2025 7mo ago
CVE-2025-13246	medium	5.3/10	shsuishang ShopSuite ModulithShop JwtAuthenticationFilter.java JwtAuthenticationFilter path traversal	Nov 16, 2025 7mo ago
CVE-2025-13209	medium	5.3/10	bestfeng oa_git_free WorkflowPredefineController.java updateWriteBack xml external entity reference	Nov 15, 2025 7mo ago
CVE-2025-13024	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Nov 11, 2025 7mo ago
CVE-2025-13016	—	—	Incorrect boundary conditions in the JavaScript: WebAssembly component	Nov 11, 2025 7mo ago
CVE-2025-42919	medium	5.3/10	Information Disclosure vulnerability in SAP NetWeaver Application Server Java	Nov 11, 2025 7mo ago
CVE-2025-64518	high	7.5/10	CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection	Nov 10, 2025 7mo ago
CVE-2025-12925	medium	6.9/10	rymcu forest UserDicController.java deleteDic authorization	Nov 10, 2025 7mo ago
CVE-2025-12924	medium	5.3/10	rymcu forest BankController.java GlobalResult authorization	Nov 10, 2025 7mo ago
CVE-2025-12682	critical	9.8/10	Easy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload	Nov 4, 2025 7mo ago
CVE-2025-12626	medium	5.3/10	jeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversal	Nov 3, 2025 7mo ago
CVE-2025-12623	low	2.3/10	fushengqian fuint Authentication Token ClientSignController.java authorization	Nov 3, 2025 7mo ago
CVE-2025-11928	medium	4.4/10	CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting	Nov 1, 2025 7mo ago
CVE-2011-10036	medium	5.1/10	Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler	Oct 30, 2025 8mo ago
CVE-2025-53883	critical	9.3/10	spacewalk-java has various XSS issues on search page	Oct 30, 2025 8mo ago
CVE-2025-12305	medium	5.3/10	quequnlong shiyi-blog Job SysJobController.java deserialization	Oct 27, 2025 8mo ago
CVE-2025-12304	medium	5.3/10	dulaiduwang003 TIME-SEA-PLUS Order Status PayController.java alipayIsSucceed improper authorization	Oct 27, 2025 8mo ago
CVE-2025-12297	medium	5.3/10	atjiu pybbs UserApiController.java information disclosure	Oct 27, 2025 8mo ago
CVE-2020-36854	medium	6.4/10	Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting	Oct 18, 2025 8mo ago
CVE-2025-62410	critical	9.4/10	--disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom	Oct 15, 2025 8mo ago
CVE-2025-62374	medium	6.4/10	Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs	Oct 14, 2025 8mo ago
CVE-2025-11551	medium	5.3/10	code-projects Student Result Manager Database.java sql injection	Oct 9, 2025 8mo ago
CVE-2025-11406	medium	5.3/10	kaifangqian kaifangqian-base SysUserController.java getAllUsers information disclosure	Oct 7, 2025 8mo ago
CVE-2025-11321	medium	5.3/10	zhuimengshaonian wisdom-education WrongBookController.java authorization	Oct 6, 2025 8mo ago
CVE-2025-11320	medium	5.3/10	zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload	Oct 6, 2025 8mo ago
CVE-2025-11289	medium	4.8/10	westboy CicadasCMS Template Management TemplateFileServiceImpl.java save cross site scripting	Oct 5, 2025 8mo ago
CVE-2025-11153	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Sep 30, 2025 9mo ago
CVE-2025-59952	high	8.7/10	minio-java Client XML Tag is Vulnerable to Value Substitution	Sep 29, 2025 9mo ago
CVE-2025-11080	medium	5.3/10	zhuimengshaonian wisdom-education ExamInfoController.java selectStudentExamInfoList improper authorization	Sep 27, 2025 9mo ago