Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,373

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,195

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 421–450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-15149	medium	4.8/10	rawchen ecms Add New Product updateProductServlet.java updateProductServlet cross site scripting	Dec 28, 2025 8mo ago
CVE-2025-15146	medium	4.8/10	SohuTV CacheCloud UserManageController.java doUserList cross site scripting	Dec 28, 2025 8mo ago
CVE-2025-15145	medium	4.8/10	SohuTV CacheCloud TotalManageController.java doTotalList cross site scripting	Dec 28, 2025 8mo ago
CVE-2025-15135	medium	5.3/10	joey-zhou xiaozhi-esp32-server-java Cookie AuthenticationInterceptor.java tryAuthenticateWithCookies improper authentication	Dec 28, 2025 8mo ago
CVE-2025-15134	medium	5.1/10	yourmaileyes MOOC Submission MainController.java subreview cross site scripting	Dec 28, 2025 8mo ago
CVE-2025-15117	low	2.3/10	Dromara Sa-Token SaJdkSerializer.java ObjectInputStream.readObject deserialization	Dec 28, 2025 8mo ago
CVE-2025-15094	medium	5.3/10	sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting	Dec 26, 2025 8mo ago
CVE-2025-15093	medium	5.3/10	sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting	Dec 26, 2025 8mo ago
CVE-2025-15087	medium	5.3/10	youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization	Dec 25, 2025 8mo ago
CVE-2025-15086	medium	5.3/10	youlaitech youlai-mall MemberController.java getMemberByMobile access control	Dec 25, 2025 8mo ago
CVE-2025-15085	medium	5.3/10	youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization	Dec 25, 2025 8mo ago
CVE-2025-15084	low	2.3/10	youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control	Dec 25, 2025 8mo ago
CVE-2025-14965	medium	5.1/10	1541492390c yougou-mall ResourceController.java delete path traversal	Dec 19, 2025 8mo ago
CVE-2025-14909	medium	5.3/10	JeecgBoot SysUserOnlineController.java SysUserOnlineController user session	Dec 19, 2025 8mo ago
CVE-2025-14908	medium	5.3/10	JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication	Dec 19, 2025 8mo ago
CVE-2025-14674	medium	5.3/10	aizuda snail-job QLExpressEngine.java QLExpressEngine.doEval injection	Dec 14, 2025 8mo ago
CVE-2025-67721	medium	6.3/10	Aircompressor's Snappy and LZ4 Java-based decompressor implementation can leak information from reused output buffer	Dec 12, 2025 8mo ago
CVE-2025-67734	medium	5.1/10	Frappe Authenticated Users can Execute JavaScript through its Job Form	Dec 12, 2025 8mo ago
CVE-2025-14538	medium	5.1/10	yangshare warehouseManager 仓库管理系统 CustomerManageHandler.java addCustomer cross site scripting	Dec 11, 2025 8mo ago
CVE-2025-14531	medium	5.3/10	code-projects Rental Management System Log Transaction.java crlf injection	Dec 11, 2025 8mo ago
CVE-2025-14518	medium	5.3/10	PowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgery	Dec 11, 2025 8mo ago
CVE-2025-14516	medium	5.3/10	Yalantis uCrop URL com.yalantis.ucrop.task.BitmapLoadTask.java downloadFile server-side request forgery	Dec 11, 2025 8mo ago
CVE-2025-67505	high	8.4/10	Race condition in the Okta Java SDK	Dec 10, 2025 8mo ago
CVE-2025-66033	medium	5.3/10	Improper Memory Cleanup in the Okta Java SDK	Dec 10, 2025 8mo ago
CVE-2025-66214	high	7.0/10	Ladybug has an XMLDecoder Deserialization Vulnerability (Java RCE)	Dec 9, 2025 8mo ago
CVE-2025-14330	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Dec 9, 2025 8mo ago
CVE-2025-14325	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Dec 9, 2025 8mo ago
CVE-2025-14324	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Dec 9, 2025 8mo ago
CVE-2025-13426	high	8.7/10	Improper Sandboxing in Google Apigee's JavaCallout Policy Allows for Remote Code Execution	Dec 5, 2025 8mo ago
CVE-2025-66566	high	8.2/10	yawkat LZ4 Java has a possible information leak in Java safe decompressor	Dec 5, 2025 8mo ago