Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,376

All time

Critical · Active

12,004

CVSS ≥ 9.0

New · 14 days

2,196

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 481–510 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-12925	medium	6.9/10	rymcu forest UserDicController.java deleteDic authorization	Nov 10, 2025 9mo ago
CVE-2025-12924	medium	5.3/10	rymcu forest BankController.java GlobalResult authorization	Nov 10, 2025 9mo ago
CVE-2025-12682	critical	9.8/10	Easy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload	Nov 4, 2025 9mo ago
CVE-2025-12626	medium	5.3/10	jeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversal	Nov 3, 2025 9mo ago
CVE-2025-12623	low	2.3/10	fushengqian fuint Authentication Token ClientSignController.java authorization	Nov 3, 2025 9mo ago
CVE-2025-11928	medium	4.4/10	CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting	Nov 1, 2025 9mo ago
CVE-2011-10036	medium	5.1/10	Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler	Oct 30, 2025 9mo ago
CVE-2025-53883	critical	9.3/10	spacewalk-java has various XSS issues on search page	Oct 30, 2025 9mo ago
CVE-2025-12305	medium	5.3/10	quequnlong shiyi-blog Job SysJobController.java deserialization	Oct 27, 2025 10mo ago
CVE-2025-12304	medium	5.3/10	dulaiduwang003 TIME-SEA-PLUS Order Status PayController.java alipayIsSucceed improper authorization	Oct 27, 2025 10mo ago
CVE-2025-12297	medium	5.3/10	atjiu pybbs UserApiController.java information disclosure	Oct 27, 2025 10mo ago
CVE-2020-36854	medium	6.4/10	Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting	Oct 18, 2025 10mo ago
CVE-2025-62410	critical	9.4/10	--disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom	Oct 15, 2025 10mo ago
CVE-2025-62374	medium	6.4/10	Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs	Oct 14, 2025 10mo ago
CVE-2025-11551	medium	5.3/10	code-projects Student Result Manager Database.java sql injection	Oct 9, 2025 10mo ago
CVE-2025-11406	medium	5.3/10	kaifangqian kaifangqian-base SysUserController.java getAllUsers information disclosure	Oct 7, 2025 10mo ago
CVE-2025-11321	medium	5.3/10	zhuimengshaonian wisdom-education WrongBookController.java authorization	Oct 6, 2025 10mo ago
CVE-2025-11320	medium	5.3/10	zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload	Oct 6, 2025 10mo ago
CVE-2025-11289	medium	4.8/10	westboy CicadasCMS Template Management TemplateFileServiceImpl.java save cross site scripting	Oct 5, 2025 10mo ago
CVE-2025-11153	—	—	JIT miscompilation in the JavaScript Engine: JIT component	Sep 30, 2025 10mo ago
CVE-2025-59952	high	8.7/10	minio-java Client XML Tag is Vulnerable to Value Substitution	Sep 29, 2025 11mo ago
CVE-2025-11080	medium	5.3/10	zhuimengshaonian wisdom-education ExamInfoController.java selectStudentExamInfoList improper authorization	Sep 27, 2025 11mo ago
CVE-2025-59434	critical	9.6/10	Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function	Sep 22, 2025 11mo ago
CVE-2025-10671	medium	6.3/10	youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values	Sep 18, 2025 11mo ago
CVE-2025-59340	critical	9.8/10	jinjava Sandbox Bypass via JavaType-Based Deserialization	Sep 17, 2025 11mo ago
CVE-2025-10532	—	—	Incorrect boundary conditions in the JavaScript: GC component	Sep 16, 2025 11mo ago
CVE-2025-10473	medium	5.3/10	yangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword sql injection	Sep 15, 2025 11mo ago
CVE-2025-10398	medium	5.3/10	fcba_zzm ics-park Smart Park Management System FileUploadUtils.java unrestricted upload	Sep 14, 2025 11mo ago
CVE-2025-10394	medium	5.1/10	fcba_zzm ics-park Smart Park Management System Scheduled Task JobController.java code injection	Sep 14, 2025 11mo ago
CVE-2025-10291	medium	5.3/10	linlinjava litemall cancel WxAftersaleController improper authorization	Sep 12, 2025 11mo ago