Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,376

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,197

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 451–480 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-13875	medium	5.3/10	Yohann0617 oci-helper OCI Configuration Upload OciServiceImpl.java addCfg path traversal	Dec 2, 2025 8mo ago
CVE-2025-13811	medium	5.3/10	jsnjfz WebStack-Guns PageFactory.java sql injection	Dec 1, 2025 8mo ago
CVE-2025-13810	medium	6.9/10	jsnjfz WebStack-Guns KaptchaController.java renderPicture path traversal	Dec 1, 2025 8mo ago
CVE-2025-13809	medium	5.3/10	orionsec orion-ops SSH Connection MachineInfoController.java server-side request forgery	Dec 1, 2025 8mo ago
CVE-2025-13808	medium	6.9/10	orionsec orion-ops User Profile UserController.java update improper authorization	Dec 1, 2025 8mo ago
CVE-2025-13807	medium	5.3/10	orionsec orion-ops API MachineKeyController.java MachineKeyController improper authorization	Dec 1, 2025 8mo ago
CVE-2025-13806	medium	6.9/10	nutzam NutzBoot Transaction API EthModule.java improper authorization	Dec 1, 2025 8mo ago
CVE-2025-13805	medium	6.3/10	nutzam NutzBoot LiteRpc-Serializer HttpServletRpcEndpoint.java getInputStream deserialization	Dec 1, 2025 8mo ago
CVE-2025-13804	medium	5.3/10	nutzam NutzBoot Ethereum Wallet EthModule.java information disclosure	Dec 1, 2025 8mo ago
CVE-2025-13791	medium	5.3/10	Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal	Nov 30, 2025 8mo ago
CVE-2025-12183	high	8.8/10	org.lz4:lz4-java - Out-of-Bounds Memory Access	Nov 28, 2025 9mo ago
CVE-2025-59302	—	—	Apache CloudStack: Potential remote code execution on Javascript engine defined rules	Nov 27, 2025 9mo ago
CVE-2025-66021	high	8.6/10	OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization	Nov 26, 2025 9mo ago
CVE-2025-65944	medium	5.1/10	Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`	Nov 25, 2025 9mo ago
CVE-2025-65108	critical	10.0/10	md-to-pdf is vulnerable to arbitrary JavaScript code execution when parsing front matter	Nov 21, 2025 9mo ago
CVE-2025-5092	medium	6.4/10	Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library	Nov 20, 2025 9mo ago
CVE-2025-13435	medium	6.3/10	Dreampie Resty HttpClient HttpClient.java request path traversal	Nov 20, 2025 9mo ago
CVE-2025-65026	medium	6.1/10	esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript	Nov 19, 2025 9mo ago
CVE-2025-64408	—	—	Apache Causeway: Java deserialization vulnerability to authenticated attackers	Nov 19, 2025 9mo ago
CVE-2025-13268	medium	5.3/10	Dromara dataCompare JDBC URL DbconfigServiceImpl.java DbConfig injection	Nov 17, 2025 9mo ago
CVE-2025-13266	medium	6.9/10	wwwlike vlife VLifeApi SysFileApi.java create path traversal	Nov 17, 2025 9mo ago
CVE-2025-13265	medium	5.3/10	lsfusion platform ZipUtils.java unpackFile path traversal	Nov 17, 2025 9mo ago
CVE-2025-13262	medium	6.9/10	lsfusion platform UploadFileRequestHandler.java UploadFileRequestHandler path traversal	Nov 17, 2025 9mo ago
CVE-2025-13261	medium	6.9/10	lsfusion platform DownloadFileRequestHandler.java DownloadFileRequestHandler path traversal	Nov 17, 2025 9mo ago
CVE-2025-13246	medium	5.3/10	shsuishang ShopSuite ModulithShop JwtAuthenticationFilter.java JwtAuthenticationFilter path traversal	Nov 16, 2025 9mo ago
CVE-2025-13209	medium	5.3/10	bestfeng oa_git_free WorkflowPredefineController.java updateWriteBack xml external entity reference	Nov 15, 2025 9mo ago
CVE-2025-13024	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Nov 11, 2025 9mo ago
CVE-2025-13016	—	—	Incorrect boundary conditions in the JavaScript: WebAssembly component	Nov 11, 2025 9mo ago
CVE-2025-42919	medium	5.3/10	Information Disclosure vulnerability in SAP NetWeaver Application Server Java	Nov 11, 2025 9mo ago
CVE-2025-64518	high	7.5/10	CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection	Nov 10, 2025 9mo ago