Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,373

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,195

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 391–420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-1062	medium	5.3/10	xiweicheng TMS HtmlUtil.java summary server-side request forgery	Jan 17, 2026 7mo ago
CVE-2026-1061	medium	5.3/10	xiweicheng TMS FileController.java upload unrestricted upload	Jan 17, 2026 7mo ago
CVE-2026-1050	medium	6.9/10	risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection	Jan 17, 2026 7mo ago
CVE-2026-0885	—	—	Use-after-free in the JavaScript: GC component	Jan 13, 2026 7mo ago
CVE-2026-0884	—	—	Use-after-free in the JavaScript Engine component	Jan 13, 2026 7mo ago
CVE-2026-0510	low	3.0/10	Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping	Jan 13, 2026 7mo ago
CVE-2025-69275	high	7.1/10	Spectrum outdated java library in class-path	Jan 12, 2026 7mo ago
CVE-2025-15499	high	8.7/10	Sangfor Operation and Maintenance Management System VersionController.java uploadCN os command injection	Jan 9, 2026 7mo ago
CVE-2025-15449	medium	5.3/10	cld378632668 JavaMall MinioController.java delete path traversal	Jan 5, 2026 7mo ago
CVE-2025-15448	medium	5.3/10	cld378632668 JavaMall MinioController.java upload unrestricted upload	Jan 5, 2026 7mo ago
CVE-2026-0574	medium	5.3/10	yeqifu warehouse Request UserController.java saveUserRole improper authorization	Jan 4, 2026 7mo ago
CVE-2026-21452	high	7.5/10	MessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation	Jan 2, 2026 7mo ago
CVE-2026-0571	medium	5.3/10	yeqifu warehouse AppFileUtils.java createResponseEntity path traversal	Jan 2, 2026 7mo ago
CVE-2025-15360	medium	5.1/10	newbee-mall-plus Product Information Edit UploadController.java upload unrestricted upload	Dec 30, 2025 7mo ago
CVE-2025-15251	medium	6.3/10	beecue FastBee SIP Message ReqAbstractHandler.java getRootElement xml external entity reference	Dec 30, 2025 7mo ago
CVE-2025-15222	low	2.3/10	Dromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserialization	Dec 30, 2025 7mo ago
CVE-2025-15221	medium	5.1/10	SohuTV CacheCloud AppDataMigrateController.java index cross site scripting	Dec 30, 2025 7mo ago
CVE-2025-15220	medium	5.3/10	SohuTV CacheCloud LoginController.java init cross site scripting	Dec 30, 2025 7mo ago
CVE-2025-15219	medium	5.1/10	SohuTV CacheCloud MachineManageController.java doPodList cross site scripting	Dec 30, 2025 7mo ago
CVE-2025-15204	medium	4.8/10	SohuTV CacheCloud QuartzManageController.java doQuartzList cross site scripting	Dec 29, 2025 7mo ago
CVE-2025-15203	medium	4.8/10	SohuTV CacheCloud ResourceController.java index cross site scripting	Dec 29, 2025 7mo ago
CVE-2025-15202	medium	4.8/10	SohuTV CacheCloud TaskController.java taskQueueList cross site scripting	Dec 29, 2025 7mo ago
CVE-2025-15201	medium	5.1/10	SohuTV CacheCloud WebResourceController.java redirectNoPower cross site scripting	Dec 29, 2025 7mo ago
CVE-2025-15200	medium	4.8/10	SohuTV CacheCloud AppClientDataShowController.java doIndex cross site scripting	Dec 29, 2025 7mo ago
CVE-2025-15175	medium	5.1/10	SohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting	Dec 29, 2025 8mo ago
CVE-2025-15174	medium	5.1/10	SohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting	Dec 29, 2025 8mo ago
CVE-2025-15173	medium	5.1/10	SohuTV CacheCloud InstanceController.java advancedAnalysis cross site scripting	Dec 29, 2025 8mo ago
CVE-2025-15172	medium	5.1/10	SohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting	Dec 29, 2025 8mo ago
CVE-2025-15171	medium	5.1/10	SohuTV CacheCloud ServerController.java index cross site scripting	Dec 29, 2025 8mo ago
CVE-2025-15152	medium	5.3/10	h-moses moga-mall PmsProductController.java addProduct unrestricted upload	Dec 28, 2025 8mo ago