Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,380

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,200

Newly disclosed

Feed last synced

50 mins ago

Data freshness

Showing 511–540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-10252	low	2.3/10	SEAT Queue Ticket Kiosk Java RMI Registry deserialization	Sep 11, 2025 11mo ago
CVE-2025-42927	low	3.4/10	Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)	Sep 9, 2025 11mo ago
CVE-2025-42926	medium	5.3/10	Missing Authentication check in SAP NetWeaver Application Server Java	Sep 9, 2025 11mo ago
CVE-2025-42925	medium	4.3/10	Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)	Sep 9, 2025 11mo ago
CVE-2025-42922	critical	9.9/10	Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service)	Sep 9, 2025 11mo ago
CVE-2025-10080	low	2.3/10	running-elephant Datart API AESUtil.java getTokensecret hard-coded key	Sep 8, 2025 11mo ago
CVE-2025-9796	medium	5.1/10	thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting	Sep 1, 2025 11mo ago
CVE-2024-28988	critical	9.8/10	SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability	Sep 1, 2025 11mo ago
CVE-2025-9795	medium	5.3/10	xujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted upload	Sep 1, 2025 11mo ago
CVE-2025-9650	medium	5.3/10	yeqifu carRental AppFileUtils.java removeFileByPath path traversal	Aug 29, 2025 12mo ago
CVE-2025-9461	medium	5.3/10	diyhi bbs File Compression FilePackageManageAction.java information disclosure	Aug 26, 2025 1y ago
CVE-2025-9406	medium	5.3/10	xuhuisheng lemon CmsArticleController.java uploadImage unrestricted upload	Aug 25, 2025 1y ago
CVE-2025-9264	medium	5.3/10	Xuxueli xxl-job Jobs JobInfoController.java remove resource injection	Aug 20, 2025 1y ago
CVE-2025-9263	medium	5.3/10	Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection	Aug 20, 2025 1y ago
CVE-2025-9239	medium	6.3/10	elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption	Aug 20, 2025 1y ago
CVE-2011-10030	high	8.4/10	Foxit PDF Reader < 4.3.1.0218 JavaScript File Write	Aug 20, 2025 1y ago
CVE-2025-55033	—	—	Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly	Aug 19, 2025 1y ago
CVE-2025-55028	—	—	JavaScript alerts could impede UI interaction or allow denial of service attacks	Aug 19, 2025 1y ago
CVE-2025-9181	—	—	Uninitialized memory in the JavaScript Engine component	Aug 19, 2025 1y ago
CVE-2025-9148	medium	5.3/10	CodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injection	Aug 19, 2025 1y ago
CVE-2025-8991	medium	5.3/10	linlinjava litemall Business Logic express logic error	Aug 15, 2025 1y ago
CVE-2025-8974	medium	6.3/10	linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials	Aug 14, 2025 1y ago
CVE-2025-8965	medium	5.3/10	linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload	Aug 14, 2025 1y ago
CVE-2025-3703	high	7.5/10	WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability	Aug 14, 2025 1y ago
CVE-2025-8931	medium	5.3/10	code-projects Medical Store Management System ChangePassword.java sql injection	Aug 14, 2025 1y ago
CVE-2025-8930	medium	5.3/10	code-projects Medical Store Management System Update Company UpdateCompany.java sql injection	Aug 14, 2025 1y ago
CVE-2025-8929	medium	5.3/10	code-projects Medical Store Management System MainPanel.java sql injection	Aug 13, 2025 1y ago
CVE-2025-8928	medium	5.3/10	code-projects Medical Store Management System Update Medicines UpdateMedicines.java sql injection	Aug 13, 2025 1y ago
CVE-2025-8841	medium	5.3/10	zlt2000 microservices-platform FileController.java upload unrestricted upload	Aug 11, 2025 1y ago
CVE-2025-8814	medium	5.3/10	atjiu pybbs CookieUtil.java setCookie cross-site request forgery	Aug 10, 2025 1y ago