Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,380

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,199

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 571–600 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-7864	medium	5.3/10	thinkgem JeeSite FileUploadController.java upload unrestricted upload	Jul 20, 2025 1y ago
CVE-2025-7863	medium	5.1/10	thinkgem JeeSite ServletUtils.java redirectUrl	Jul 20, 2025 1y ago
CVE-2025-7789	medium	6.3/10	Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash	Jul 18, 2025 1y ago
CVE-2025-7788	medium	5.3/10	Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection	Jul 18, 2025 1y ago
CVE-2025-7787	medium	5.3/10	Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery	Jul 18, 2025 1y ago
CVE-2025-7785	medium	5.3/10	thinkgem JeeSite SsoController.java sso redirect	Jul 18, 2025 1y ago
CVE-2025-7763	medium	5.3/10	thinkgem JeeSite Site Controller SiteController.java select redirect	Jul 17, 2025 1y ago
CVE-2025-7759	medium	5.3/10	thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery	Jul 17, 2025 1y ago
CVE-2025-52687	low	2.4/10	JavaScript Injection Vulnerability in the OmniAccess Stellar Web Management Interface	Jul 16, 2025 1y ago
CVE-2025-7566	medium	5.1/10	jshERP SystemConfigController.java exportExcelByParam path traversal	Jul 14, 2025 1y ago
CVE-2025-7552	medium	5.3/10	Dromara Northstar Path AuthorizationInterceptor.java preHandle access control	Jul 13, 2025 1y ago
CVE-2025-42978	low	3.5/10	Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java	Jul 8, 2025 1y ago
CVE-2025-42963	critical	9.1/10	Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )	Jul 8, 2025 1y ago
CVE-2025-7108	medium	5.3/10	risesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal	Jul 7, 2025 1y ago
CVE-2025-53569	medium	4.3/10	WordPress Trust Payments Gateway for WooCommerce (JavaScript Library) plugin <= 1.3.6 - Cross Site Request Forgery (CSRF) Vulnerability	Jul 4, 2025 1y ago
CVE-2025-2537	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library	Jul 3, 2025 1y ago
CVE-2025-2540	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Library	Jul 3, 2025 1y ago
CVE-2024-5647	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library	Jul 3, 2025 1y ago
CVE-2025-6925	medium	6.9/10	Dromara RuoYi-Vue-Plus Mail MailController.java path traversal	Jun 30, 2025 1y ago
CVE-2025-5878	medium	6.9/10	ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element	Jun 29, 2025 1y ago
CVE-2025-6768	medium	5.3/10	sfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injection	Jun 27, 2025 1y ago
CVE-2025-6767	medium	5.3/10	sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection	Jun 27, 2025 1y ago
CVE-2025-6766	medium	5.3/10	sfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection	Jun 27, 2025 1y ago
CVE-2025-6753	medium	5.3/10	huija bicycleSharingServer AdminController.java selectAdminByNameLike sql injection	Jun 27, 2025 1y ago
CVE-2025-6749	medium	5.3/10	huija bicycleSharingServer AdminController.java searchAdminMessageShow sql injection	Jun 27, 2025 1y ago
CVE-2025-6738	medium	5.3/10	huija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike sql injection	Jun 27, 2025 1y ago
CVE-2025-6702	medium	5.3/10	linlinjava litemall post improper authorization	Jun 26, 2025 1y ago
CVE-2025-6552	medium	5.3/10	java-aodeng Hope-Boot Login WebController.java doLogin redirect	Jun 24, 2025 1y ago
CVE-2025-6551	medium	5.1/10	java-aodeng Hope-Boot WebController.java login cross site scripting	Jun 24, 2025 1y ago
CVE-2025-6534	low	2.3/10	xxyopen/201206030 novel-plus File FileController.java remove resource injection	Jun 24, 2025 1y ago