Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

21 hrs ago

Data freshness

Showing 451–480 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-8965	medium	5.3/10	linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload	Aug 14, 2025 10mo ago
CVE-2025-3703	high	7.5/10	WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability	Aug 14, 2025 10mo ago
CVE-2025-8931	medium	5.3/10	code-projects Medical Store Management System ChangePassword.java sql injection	Aug 14, 2025 10mo ago
CVE-2025-8930	medium	5.3/10	code-projects Medical Store Management System Update Company UpdateCompany.java sql injection	Aug 14, 2025 10mo ago
CVE-2025-8929	medium	5.3/10	code-projects Medical Store Management System MainPanel.java sql injection	Aug 13, 2025 10mo ago
CVE-2025-8928	medium	5.3/10	code-projects Medical Store Management System Update Medicines UpdateMedicines.java sql injection	Aug 13, 2025 10mo ago
CVE-2025-8841	medium	5.3/10	zlt2000 microservices-platform FileController.java upload unrestricted upload	Aug 11, 2025 10mo ago
CVE-2025-8814	medium	5.3/10	atjiu pybbs CookieUtil.java setCookie cross-site request forgery	Aug 10, 2025 10mo ago
CVE-2025-8813	medium	5.1/10	atjiu pybbs IndexController.java changeLanguage redirect	Aug 10, 2025 10mo ago
CVE-2025-8764	medium	5.3/10	linlinjava litemall upload unrestricted upload	Aug 9, 2025 10mo ago
CVE-2025-8755	medium	6.9/10	macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization	Aug 9, 2025 10mo ago
CVE-2025-8753	medium	5.3/10	linlinjava litemall File delete path traversal	Aug 9, 2025 10mo ago
CVE-2025-8737	medium	5.1/10	zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect	Aug 8, 2025 10mo ago
CVE-2025-8708	low	2.3/10	Antabot White-Jotter com.gm.wj.config.ShiroConfiguration ShiroConfiguration.java CookieRememberMeManager deserialization	Aug 8, 2025 10mo ago
CVE-2025-8549	medium	6.3/10	atjiu pybbs UserAdminController.java update weak password	Aug 5, 2025 10mo ago
CVE-2025-8548	medium	6.3/10	atjiu pybbs Registered Email SettingsApiController.java sendEmailCode information exposure	Aug 5, 2025 10mo ago
CVE-2025-8535	medium	5.1/10	cronoh NanoVault xrb URL main.js executeJavaScript cross site scripting	Aug 5, 2025 10mo ago
CVE-2025-8529	medium	5.3/10	cloudfavorites favorites-web CollectController.java getCollectLogoUrl server-side request forgery	Aug 4, 2025 10mo ago
CVE-2025-8527	medium	5.3/10	Exrick xboot Swagger SecurityController.java server-side request forgery	Aug 4, 2025 10mo ago
CVE-2025-8526	medium	5.3/10	Exrick xboot UploadController.java upload unrestricted upload	Aug 4, 2025 10mo ago
CVE-2025-8344	medium	5.3/10	openviglet shio ShStaticFileAPI.java shStaticFileUpload unrestricted upload	Jul 31, 2025 11mo ago
CVE-2025-8343	medium	5.3/10	openviglet shio ShStaticFileAPI.java shStaticFilePreUpload path traversal	Jul 31, 2025 11mo ago
CVE-2025-8223	medium	5.3/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 AdminTypeCustController.java cross-site request forgery	Jul 27, 2025 11mo ago
CVE-2025-8222	medium	5.1/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java cross site scripting	Jul 27, 2025 11mo ago
CVE-2025-8221	medium	5.3/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsCustController.java goodsSearch cross site scripting	Jul 27, 2025 11mo ago
CVE-2025-8211	medium	5.1/10	Roothub SystemConfigAdminController.java edit cross site scripting	Jul 26, 2025 11mo ago
CVE-2025-8033	—	—	Incorrect JavaScript state machine for generators	Jul 22, 2025 11mo ago
CVE-2025-8029	—	—	javascript: URLs executed on object and embed tags	Jul 22, 2025 11mo ago
CVE-2025-8027	—	—	JavaScript engine only wrote partial return value to stack	Jul 22, 2025 11mo ago
CVE-2025-7939	medium	5.3/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java addGoods unrestricted upload	Jul 21, 2025 11mo ago