Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

701

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 541–570 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-4839	low	2.3/10	itwanger paicoding CrossUtil.java cross-domain policy	May 17, 2025 1y ago
CVE-2025-4838	medium	5.3/10	kanwangzjm Funiture Login LoginServlet.java doPost redirect	May 17, 2025 1y ago
CVE-2025-4768	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm PictureServiceImpl.java uploadPicture unrestricted upload	May 16, 2025 1y ago
CVE-2024-8090	—	—	JavaScript Logic <= 0.1 - CSRF to Stored XSS	May 15, 2025 1y ago
CVE-2024-13914	high	7.2/10	File Manager Advanced Shortcode <= Multiple Versions - Authenticated (Administrator+) Local JavaScript File Inclusion via Shortcode	May 15, 2025 1y ago
CVE-2025-3909	—	—	JavaScript Execution via Spoofed PDF Attachment and file:/// Link	May 14, 2025 1y ago
CVE-2025-4542	low	2.3/10	Freeebird Hotel 酒店管理系统 API SessionInterceptor.java cross-domain policy	May 11, 2025 1y ago
CVE-2025-4530	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm File FileController.java handleFileDownload path traversal	May 11, 2025 1y ago
CVE-2025-4514	medium	5.3/10	Zhengzhou Jiuhua Electronic Technology mayicms javascript.php sql injection	May 10, 2025 1y ago
CVE-2025-4511	medium	5.3/10	vector4wang spring-boot-quick quick-img2txt Img2TxtController.java ResponseEntity path traversal	May 10, 2025 1y ago
CVE-2025-4495	medium	5.1/10	JAdmin-JAVA JAdmin save cross site scripting	May 10, 2025 1y ago
CVE-2025-4494	medium	6.9/10	JAdmin-JAVA JAdmin Admin Backend NoNeedLoginController.java toLogin improper authentication	May 9, 2025 1y ago
CVE-2025-46762	high	7.1/10	Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata	May 6, 2025 1y ago
CVE-2025-4333	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java uploadFile unrestricted upload	May 6, 2025 1y ago
CVE-2025-4328	medium	5.1/10	fp2952 spring-cloud-base HTTP Header MvcController.java sendBack redirect	May 6, 2025 1y ago
CVE-2025-4260	medium	5.3/10	zhangyanbo2007 youkefu TemplateController.java impsave deserialization	May 5, 2025 1y ago
CVE-2025-4259	medium	5.3/10	newbee-mall UploadController.java upload unrestricted upload	May 5, 2025 1y ago
CVE-2025-4258	medium	5.3/10	zhangyanbo2007 youkefu MediaController.java upload unrestricted upload	May 5, 2025 1y ago
CVE-2025-4178	medium	5.3/10	xiaowei1118 java_server File Upload API FoodController.java path traversal	May 1, 2025 1y ago
CVE-2025-4175	medium	5.3/10	AlanBinu007 Spring-Boot-Advanced-Projects Upload Profile API Endpoint UserProfileController.java uploadUserProfileImage path traversal	May 1, 2025 1y ago
CVE-2025-4083	—	—	Process isolation bypass using "javascript:" URI links in cross-origin frames	Apr 29, 2025 1y ago
CVE-2025-4036	medium	5.3/10	201206030 Novel Chapter AuthorController.java updateBookChapter access control	Apr 28, 2025 1y ago
CVE-2025-4019	medium	6.9/10	20120630 Novel-Plus GeneratorController.java genCode missing authentication	Apr 28, 2025 1y ago
CVE-2025-4018	medium	6.9/10	20120630 Novel-Plus CrawlController.java addCrawlSource missing authentication	Apr 28, 2025 1y ago
CVE-2025-4017	medium	5.3/10	20120630 Novel-Plus LogController.java list improper authorization	Apr 28, 2025 1y ago
CVE-2025-4016	medium	5.3/10	20120630 Novel-Plus LogController.java deleteIndex improper authorization	Apr 28, 2025 1y ago
CVE-2025-4015	medium	6.9/10	20120630 Novel-Plus SessionController.java list missing authentication	Apr 28, 2025 1y ago
CVE-2025-3986	medium	5.3/10	Apereo CAS CasConfigurationMetadataServerController.java redos	Apr 27, 2025 1y ago
CVE-2025-3984	low	2.3/10	Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection	Apr 27, 2025 1y ago
CVE-2025-3843	medium	5.3/10	panhainan DS-Java cross-site request forgery	Apr 21, 2025 1y ago