Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,380

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,200

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 541–570 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-8813	medium	5.1/10	atjiu pybbs IndexController.java changeLanguage redirect	Aug 10, 2025 1y ago
CVE-2025-8764	medium	5.3/10	linlinjava litemall upload unrestricted upload	Aug 9, 2025 1y ago
CVE-2025-8755	medium	6.9/10	macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization	Aug 9, 2025 1y ago
CVE-2025-8753	medium	5.3/10	linlinjava litemall File delete path traversal	Aug 9, 2025 1y ago
CVE-2025-8737	medium	5.1/10	zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect	Aug 8, 2025 1y ago
CVE-2025-8708	low	2.3/10	Antabot White-Jotter com.gm.wj.config.ShiroConfiguration ShiroConfiguration.java CookieRememberMeManager deserialization	Aug 8, 2025 1y ago
CVE-2025-8549	medium	6.3/10	atjiu pybbs UserAdminController.java update weak password	Aug 5, 2025 1y ago
CVE-2025-8548	medium	6.3/10	atjiu pybbs Registered Email SettingsApiController.java sendEmailCode information exposure	Aug 5, 2025 1y ago
CVE-2025-8535	medium	5.1/10	cronoh NanoVault xrb URL main.js executeJavaScript cross site scripting	Aug 5, 2025 1y ago
CVE-2025-8529	medium	5.3/10	cloudfavorites favorites-web CollectController.java getCollectLogoUrl server-side request forgery	Aug 4, 2025 1y ago
CVE-2025-8527	medium	5.3/10	Exrick xboot Swagger SecurityController.java server-side request forgery	Aug 4, 2025 1y ago
CVE-2025-8526	medium	5.3/10	Exrick xboot UploadController.java upload unrestricted upload	Aug 4, 2025 1y ago
CVE-2025-8344	medium	5.3/10	openviglet shio ShStaticFileAPI.java shStaticFileUpload unrestricted upload	Jul 31, 2025 1y ago
CVE-2025-8343	medium	5.3/10	openviglet shio ShStaticFileAPI.java shStaticFilePreUpload path traversal	Jul 31, 2025 1y ago
CVE-2025-8223	medium	5.3/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 AdminTypeCustController.java cross-site request forgery	Jul 27, 2025 1y ago
CVE-2025-8222	medium	5.1/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java cross site scripting	Jul 27, 2025 1y ago
CVE-2025-8221	medium	5.3/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsCustController.java goodsSearch cross site scripting	Jul 27, 2025 1y ago
CVE-2025-8211	medium	5.1/10	Roothub SystemConfigAdminController.java edit cross site scripting	Jul 26, 2025 1y ago
CVE-2025-8033	—	—	Incorrect JavaScript state machine for generators	Jul 22, 2025 1y ago
CVE-2025-8029	—	—	javascript: URLs executed on object and embed tags	Jul 22, 2025 1y ago
CVE-2025-8027	—	—	JavaScript engine only wrote partial return value to stack	Jul 22, 2025 1y ago
CVE-2025-7939	medium	5.3/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java addGoods unrestricted upload	Jul 21, 2025 1y ago
CVE-2025-7938	medium	5.3/10	jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java updateGoods authorization	Jul 21, 2025 1y ago
CVE-2025-7936	medium	5.3/10	fuyang_lipengjun platform ScheduleJobLogController.java queryPage sql injection	Jul 21, 2025 1y ago
CVE-2025-7935	medium	5.3/10	fuyang_lipengjun platform SysLogController.java SysLogController sql injection	Jul 21, 2025 1y ago
CVE-2025-7934	medium	5.3/10	fuyang_lipengjun platform ScheduleJobController.java queryPage sql injection	Jul 21, 2025 1y ago
CVE-2025-7906	medium	5.3/10	yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload	Jul 20, 2025 1y ago
CVE-2025-7902	medium	5.1/10	yangzongzhuan RuoYi SysNoticeController.java addSave cross site scripting	Jul 20, 2025 1y ago
CVE-2025-7888	medium	5.3/10	TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection	Jul 20, 2025 1y ago
CVE-2025-7865	medium	5.1/10	thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting	Jul 20, 2025 1y ago