Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

1 day ago

Data freshness

Showing 511–540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-6766	medium	5.3/10	sfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection	Jun 27, 2025 1y ago
CVE-2025-6753	medium	5.3/10	huija bicycleSharingServer AdminController.java selectAdminByNameLike sql injection	Jun 27, 2025 1y ago
CVE-2025-6749	medium	5.3/10	huija bicycleSharingServer AdminController.java searchAdminMessageShow sql injection	Jun 27, 2025 1y ago
CVE-2025-6738	medium	5.3/10	huija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike sql injection	Jun 27, 2025 1y ago
CVE-2025-6702	medium	5.3/10	linlinjava litemall post improper authorization	Jun 26, 2025 1y ago
CVE-2025-6552	medium	5.3/10	java-aodeng Hope-Boot Login WebController.java doLogin redirect	Jun 24, 2025 1y ago
CVE-2025-6551	medium	5.1/10	java-aodeng Hope-Boot WebController.java login cross site scripting	Jun 24, 2025 1y ago
CVE-2025-6534	low	2.3/10	xxyopen/201206030 novel-plus File FileController.java remove resource injection	Jun 24, 2025 1y ago
CVE-2025-6533	medium	6.3/10	xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay	Jun 24, 2025 1y ago
CVE-2025-6517	medium	5.3/10	Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery	Jun 23, 2025 1y ago
CVE-2025-6509	medium	5.1/10	seaswalker spring-analysis SimpleController.java echo cross site scripting	Jun 23, 2025 1y ago
CVE-2025-6466	medium	5.3/10	ageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload	Jun 22, 2025 1y ago
CVE-2025-6453	medium	5.3/10	diyhi bbs API ForumManageAction.java add path traversal	Jun 22, 2025 1y ago
CVE-2025-6109	medium	5.3/10	javahongxi whatsmars InitializrController.java initialize path traversal	Jun 16, 2025 1y ago
CVE-2025-6108	medium	5.3/10	hansonwang99 Spring-Boot-In-Action File Upload ImageUploadService.java watermarkTest path traversal	Jun 16, 2025 1y ago
CVE-2025-6106	medium	5.3/10	WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery	Jun 16, 2025 1y ago
CVE-2025-6105	medium	5.3/10	jflyfox jfinal_cms HOME.java cross-site request forgery	Jun 16, 2025 1y ago
CVE-2025-5887	medium	5.1/10	jsnjfz WebStack-Guns File Upload UserMgrController.java cross site scripting	Jun 9, 2025 1y ago
CVE-2025-5879	medium	5.1/10	WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting	Jun 9, 2025 1y ago
CVE-2025-5680	medium	5.3/10	Shenzhen Dashi Tongzhou Information Technology AgileBPM Groovy Script SysScriptController.java executeScript deserialization	Jun 5, 2025 1y ago
CVE-2025-5679	medium	5.3/10	Shenzhen Dashi Tongzhou Information Technology AgileBPM SysToolsController.java parseStrByFreeMarker deserialization	Jun 5, 2025 1y ago
CVE-2025-5545	medium	5.3/10	aaluoxiang oa_system ProcedureController.java image path traversal	Jun 3, 2025 1y ago
CVE-2025-5544	medium	5.3/10	aaluoxiang oa_system UserpanelController.java image path traversal	Jun 3, 2025 1y ago
CVE-2025-23393	medium	5.2/10	Reflected XSS in spacewalk-java	May 27, 2025 1y ago
CVE-2025-23392	medium	5.2/10	Reflected XSS in SystemsController.java in spacewalk-java	May 26, 2025 1y ago
CVE-2025-5171	medium	5.3/10	llisoft MTA Maita Training System OpenController.java this.fileService.download unrestricted upload	May 26, 2025 1y ago
CVE-2025-5170	medium	5.3/10	llisoft MTA Maita Training System AdminShitiController.java AdminShitiListRequestVo sql injection	May 26, 2025 1y ago
CVE-2025-48368	medium	5.8/10	GroupOffice's DOM-Based XSS in all Date Input Fields Allows Arbitrary JavaScript Execution	May 22, 2025 1y ago
CVE-2024-5878	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library	May 20, 2025 1y ago
CVE-2025-4893	medium	5.3/10	jammy928 CoinExchange_CryptoExchange_Java File Upload Endpoint UploadFileUtil.java uploadLocalImage path traversal	May 18, 2025 1y ago