Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 601–630 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-30065	critical	10.0/10	Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata	Apr 1, 2025 1y ago
CVE-2025-31629	medium	6.5/10	WordPress Infusionsoft Web Form JavaScript plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	Mar 31, 2025 1y ago
CVE-2025-2835	medium	5.3/10	zhangyd-c OneBlog RestApiController.java autoLink server-side request forgery	Mar 27, 2025 1y ago
CVE-2025-2491	medium	4.8/10	Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting	Mar 18, 2025 1y ago
CVE-2025-2490	medium	4.8/10	Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting	Mar 18, 2025 1y ago
CVE-2025-2365	medium	5.3/10	crmeb_java WeChatMessageController.java webHook xml external entity reference	Mar 17, 2025 1y ago
CVE-2025-2364	medium	5.1/10	lenve VBlog ArticleService.java addNewArticle cross site scripting	Mar 17, 2025 1y ago
CVE-2025-2363	medium	5.3/10	lenve VBlog ArticleController.java uploadImg path traversal	Mar 17, 2025 1y ago
CVE-2025-2322	medium	6.9/10	274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials	Mar 15, 2025 1y ago
CVE-2025-2112	medium	5.3/10	user-xiangpeng yaoqishan MediaInfoService.java getMediaLisByFilter sql injection	Mar 8, 2025 1y ago
CVE-2024-5667	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library	Mar 5, 2025 1y ago
CVE-2025-1695	medium	5.3/10	NGINX Unit Java Vulnerability	Mar 4, 2025 1y ago
CVE-2024-9285	medium	5.3/10	Tu Yafeng Via Browser Javascript Bridge cross site scripting	Feb 27, 2025 1y ago
CVE-2025-1584	medium	5.3/10	opensolon Solon StaticMappings.java path traversal	Feb 23, 2025 1y ago
CVE-2025-1225	medium	5.3/10	ywoa WXCallBack Interface XMLParse.java extract xml external entity reference	Feb 12, 2025 1y ago
CVE-2025-24869	medium	4.3/10	Information Disclosure vulnerability in SAP NetWeaver Application Server Java	Feb 11, 2025 1y ago
CVE-2024-11831	medium	5.4/10	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	Feb 10, 2025 1y ago
CVE-2025-0982	critical	9.4/10	Sandbox Escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine)	Feb 6, 2025 1y ago
CVE-2025-23210	medium	4.8/10	Bypass XSS sanitizer using the javascript protocol and special characters in phpoffice/phpspreadsheet	Feb 3, 2025 1y ago
CVE-2025-0851	critical	9.3/10	Path traversal issue in Deep Java Library	Jan 29, 2025 1y ago
CVE-2025-0705	medium	6.9/10	JoeyBling bootplus QrCodeController.java qrCode redirect	Jan 24, 2025 1y ago
CVE-2025-0704	medium	6.9/10	JoeyBling bootplus QrCodeController.java qrCode resource consumption	Jan 24, 2025 1y ago
CVE-2025-0703	medium	5.3/10	JoeyBling bootplus SysFileController.java path traversal	Jan 24, 2025 1y ago
CVE-2025-0702	medium	5.3/10	JoeyBling bootplus SysFileController.java unrestricted upload	Jan 24, 2025 1y ago
CVE-2025-0558	medium	5.3/10	TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection	Jan 18, 2025 1y ago
CVE-2025-23026	medium	6.1/10	HTML templates containing Javascript template strings are subject to XSS in jte	Jan 13, 2025 1y ago
CVE-2025-0410	medium	5.3/10	liujianview gymxmjpa MenberConntroller.java MenberDaoInpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0409	medium	5.3/10	liujianview gymxmjpa MembertypeController.java MembertypeDaoImpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0408	medium	5.3/10	liujianview gymxmjpa LoosController.java LoosDaoImpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0407	medium	5.3/10	liujianview gymxmjpa EquipmentController.java EquipmentDaoImpl sql injection	Jan 13, 2025 1y ago