Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

700

Newly disclosed

Feed last synced

20 hrs ago

Data freshness

Showing 421–450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-59434	critical	9.6/10	Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function	Sep 22, 2025 9mo ago
CVE-2025-10671	medium	6.3/10	youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values	Sep 18, 2025 9mo ago
CVE-2025-59340	critical	9.8/10	jinjava Sandbox Bypass via JavaType-Based Deserialization	Sep 17, 2025 9mo ago
CVE-2025-10532	—	—	Incorrect boundary conditions in the JavaScript: GC component	Sep 16, 2025 9mo ago
CVE-2025-10473	medium	5.3/10	yangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword sql injection	Sep 15, 2025 9mo ago
CVE-2025-10398	medium	5.3/10	fcba_zzm ics-park Smart Park Management System FileUploadUtils.java unrestricted upload	Sep 14, 2025 9mo ago
CVE-2025-10394	medium	5.1/10	fcba_zzm ics-park Smart Park Management System Scheduled Task JobController.java code injection	Sep 14, 2025 9mo ago
CVE-2025-10291	medium	5.3/10	linlinjava litemall cancel WxAftersaleController improper authorization	Sep 12, 2025 9mo ago
CVE-2025-10252	low	2.3/10	SEAT Queue Ticket Kiosk Java RMI Registry deserialization	Sep 11, 2025 9mo ago
CVE-2025-42927	low	3.4/10	Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)	Sep 9, 2025 9mo ago
CVE-2025-42926	medium	5.3/10	Missing Authentication check in SAP NetWeaver Application Server Java	Sep 9, 2025 9mo ago
CVE-2025-42925	medium	4.3/10	Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)	Sep 9, 2025 9mo ago
CVE-2025-42922	critical	9.9/10	Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service)	Sep 9, 2025 9mo ago
CVE-2025-10080	low	2.3/10	running-elephant Datart API AESUtil.java getTokensecret hard-coded key	Sep 8, 2025 9mo ago
CVE-2025-9796	medium	5.1/10	thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting	Sep 1, 2025 9mo ago
CVE-2024-28988	critical	9.8/10	SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability	Sep 1, 2025 9mo ago
CVE-2025-9795	medium	5.3/10	xujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted upload	Sep 1, 2025 9mo ago
CVE-2025-9650	medium	5.3/10	yeqifu carRental AppFileUtils.java removeFileByPath path traversal	Aug 29, 2025 10mo ago
CVE-2025-9461	medium	5.3/10	diyhi bbs File Compression FilePackageManageAction.java information disclosure	Aug 26, 2025 10mo ago
CVE-2025-9406	medium	5.3/10	xuhuisheng lemon CmsArticleController.java uploadImage unrestricted upload	Aug 25, 2025 10mo ago
CVE-2025-9264	medium	5.3/10	Xuxueli xxl-job Jobs JobInfoController.java remove resource injection	Aug 20, 2025 10mo ago
CVE-2025-9263	medium	5.3/10	Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection	Aug 20, 2025 10mo ago
CVE-2025-9239	medium	6.3/10	elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption	Aug 20, 2025 10mo ago
CVE-2011-10030	high	8.4/10	Foxit PDF Reader < 4.3.1.0218 JavaScript File Write	Aug 20, 2025 10mo ago
CVE-2025-55033	—	—	Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly	Aug 19, 2025 10mo ago
CVE-2025-55028	—	—	JavaScript alerts could impede UI interaction or allow denial of service attacks	Aug 19, 2025 10mo ago
CVE-2025-9181	—	—	Uninitialized memory in the JavaScript Engine component	Aug 19, 2025 10mo ago
CVE-2025-9148	medium	5.3/10	CodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injection	Aug 19, 2025 10mo ago
CVE-2025-8991	medium	5.3/10	linlinjava litemall Business Logic express logic error	Aug 15, 2025 10mo ago
CVE-2025-8974	medium	6.3/10	linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials	Aug 14, 2025 10mo ago