Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

701

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 571–600 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-3842	medium	5.3/10	panhainan DS-Java FileUpload.java uploadUserPic.action code injection	Apr 21, 2025 1y ago
CVE-2025-3830	medium	5.3/10	kuangstudy KuangSimpleBBS QuestionController.java fileUpload unrestricted upload	Apr 20, 2025 1y ago
CVE-2025-3807	medium	5.3/10	zhenfeng13 My-BBS Endpoint UploadController.java upload unrestricted upload	Apr 19, 2025 1y ago
CVE-2025-3588	medium	4.8/10	joelittlejohn jsonschema2pojo JSON File SchemaRule.java apply stack-based overflow	Apr 14, 2025 1y ago
CVE-2025-3570	medium	5.1/10	JamesZBL/code-projects db-hospital-drug ContentController.java save cross site scripting	Apr 14, 2025 1y ago
CVE-2025-3569	medium	5.3/10	JamesZBL/code-projects db-hospital-drug ShiroConfig.java improper authorization	Apr 14, 2025 1y ago
CVE-2025-3567	medium	5.3/10	veal98 小牛肉 Echo 开源社区系统 Ticket LoginTicketInterceptor.java preHandle improper authorization	Apr 14, 2025 1y ago
CVE-2025-32699	low	2.1/10	Potential javascript injection attack enabled by Unicode normalization in Action API	Apr 10, 2025 1y ago
CVE-2025-3413	medium	5.3/10	opplus springboot-admin SysGeneratorController.java code deserialization	Apr 8, 2025 1y ago
CVE-2025-3412	medium	5.3/10	mymagicpower AIAS InferController.java server-side request forgery	Apr 8, 2025 1y ago
CVE-2025-3411	medium	5.3/10	mymagicpower AIAS AsrController.java server-side request forgery	Apr 8, 2025 1y ago
CVE-2025-3410	medium	5.3/10	mymagicpower AIAS LocalStorageController.java unrestricted upload	Apr 8, 2025 1y ago
CVE-2025-3398	medium	5.3/10	lenve VBlog WebSecurityConfig.java configure access control	Apr 8, 2025 1y ago
CVE-2025-3392	medium	5.1/10	hailey888 oa_system Backend MailController.java save cross site scripting	Apr 8, 2025 1y ago
CVE-2025-3391	medium	5.1/10	hailey888 oa_system Backend AddrController. java outAddress cross site scripting	Apr 8, 2025 1y ago
CVE-2025-3390	medium	5.1/10	hailey888 oa_system Backend DaymanageController.java addandchangeday cross site scripting	Apr 8, 2025 1y ago
CVE-2025-3389	medium	5.1/10	hailey888 oa_system Backend InformManageController.java testMess cross site scripting	Apr 7, 2025 1y ago
CVE-2025-3388	medium	5.3/10	hailey888 oa_system Frontend LoginsController.java loginCheck cross site scripting	Apr 7, 2025 1y ago
CVE-2025-3382	medium	5.3/10	joey-zhou xiaozhi-esp32-server-java update sql injection	Apr 7, 2025 1y ago
CVE-2025-3381	medium	5.3/10	zhangyanbo2007 youkefu File Upload WebIMController.java path traversal	Apr 7, 2025 1y ago
CVE-2025-3324	medium	5.3/10	godcheese/code-projects Nimrod FileRestController.java unrestricted upload	Apr 6, 2025 1y ago
CVE-2025-3323	medium	5.3/10	godcheese/code-projects Nimrod ViewMenuCategoryRestController.java searchAllByName sql injection	Apr 6, 2025 1y ago
CVE-2025-3318	medium	5.3/10	Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 ShangpinleixingController.java page sql injection	Apr 6, 2025 1y ago
CVE-2025-3305	medium	5.3/10	1902756969/code-projects IKUN_Library Borrow MvcConfig.java addInterceptors access control	Apr 5, 2025 1y ago
CVE-2025-3245	medium	5.3/10	itsourcecode Library Management System Forgot.java search sql injection	Apr 4, 2025 1y ago
CVE-2025-3241	medium	5.3/10	zhangyanbo2007 youkefu XML Document CallCenterRouterController.java xml external entity reference	Apr 4, 2025 1y ago
CVE-2025-3202	medium	6.9/10	ageerle ruoyi-ai SysNoticeController.java improper authorization	Apr 4, 2025 1y ago
CVE-2025-3199	medium	6.9/10	ageerle ruoyi-ai API Interface SysModelController.java improper authorization	Apr 4, 2025 1y ago
CVE-2025-2946	critical	9.1/10	Cross-Site Vulnerability(XSS) due to arbitrary HTML/JavaScript gets executed while query result rendering in Query Tool and View/Edit Data Tool of pgAdmin 4	Apr 3, 2025 1y ago
CVE-2024-9416	medium	6.4/10	Modula Image Gallery <= 2.10.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library	Apr 3, 2025 1y ago