Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

23 hrs ago

Data freshness

Showing 481–510 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-7938	medium	5.3/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java updateGoods authorization	Jul 21, 2025 11mo ago
CVE-2025-7936	medium	5.3/10	fuyang_lipengjun platform ScheduleJobLogController.java queryPage sql injection	Jul 21, 2025 11mo ago
CVE-2025-7935	medium	5.3/10	fuyang_lipengjun platform SysLogController.java SysLogController sql injection	Jul 21, 2025 11mo ago
CVE-2025-7934	medium	5.3/10	fuyang_lipengjun platform ScheduleJobController.java queryPage sql injection	Jul 21, 2025 11mo ago
CVE-2025-7906	medium	5.3/10	yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload	Jul 20, 2025 11mo ago
CVE-2025-7902	medium	5.1/10	yangzongzhuan RuoYi SysNoticeController.java addSave cross site scripting	Jul 20, 2025 11mo ago
CVE-2025-7888	medium	5.3/10	TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection	Jul 20, 2025 11mo ago
CVE-2025-7865	medium	5.1/10	thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting	Jul 20, 2025 11mo ago
CVE-2025-7864	medium	5.3/10	thinkgem JeeSite FileUploadController.java upload unrestricted upload	Jul 20, 2025 11mo ago
CVE-2025-7863	medium	5.1/10	thinkgem JeeSite ServletUtils.java redirectUrl	Jul 20, 2025 11mo ago
CVE-2025-7789	medium	6.3/10	Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash	Jul 18, 2025 11mo ago
CVE-2025-7788	medium	5.3/10	Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection	Jul 18, 2025 11mo ago
CVE-2025-7787	medium	5.3/10	Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery	Jul 18, 2025 11mo ago
CVE-2025-7785	medium	5.3/10	thinkgem JeeSite SsoController.java sso redirect	Jul 18, 2025 11mo ago
CVE-2025-7763	medium	5.3/10	thinkgem JeeSite Site Controller SiteController.java select redirect	Jul 17, 2025 11mo ago
CVE-2025-7759	medium	5.3/10	thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery	Jul 17, 2025 11mo ago
CVE-2025-52687	low	2.4/10	JavaScript Injection Vulnerability in the OmniAccess Stellar Web Management Interface	Jul 16, 2025 11mo ago
CVE-2025-7566	medium	5.1/10	jshERP SystemConfigController.java exportExcelByParam path traversal	Jul 14, 2025 11mo ago
CVE-2025-7552	medium	5.3/10	Dromara Northstar Path AuthorizationInterceptor.java preHandle access control	Jul 13, 2025 11mo ago
CVE-2025-42978	low	3.5/10	Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java	Jul 8, 2025 11mo ago
CVE-2025-42963	critical	9.1/10	Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )	Jul 8, 2025 11mo ago
CVE-2025-7108	medium	5.3/10	risesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal	Jul 7, 2025 11mo ago
CVE-2025-53569	medium	4.3/10	WordPress Trust Payments Gateway for WooCommerce (JavaScript Library) plugin <= 1.3.6 - Cross Site Request Forgery (CSRF) Vulnerability	Jul 4, 2025 11mo ago
CVE-2025-2537	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library	Jul 3, 2025 11mo ago
CVE-2025-2540	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Library	Jul 3, 2025 11mo ago
CVE-2024-5647	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library	Jul 3, 2025 11mo ago
CVE-2025-6925	medium	6.9/10	Dromara RuoYi-Vue-Plus Mail MailController.java path traversal	Jun 30, 2025 12mo ago
CVE-2025-5878	medium	6.9/10	ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element	Jun 29, 2025 12mo ago
CVE-2025-6768	medium	5.3/10	sfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injection	Jun 27, 2025 1y ago
CVE-2025-6767	medium	5.3/10	sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection	Jun 27, 2025 1y ago