Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,382

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,196

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 601–630 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-6533	medium	6.3/10	xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay	Jun 24, 2025 1y ago
CVE-2025-6517	medium	5.3/10	Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery	Jun 23, 2025 1y ago
CVE-2025-6509	medium	5.1/10	seaswalker spring-analysis SimpleController.java echo cross site scripting	Jun 23, 2025 1y ago
CVE-2025-6466	medium	5.3/10	ageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload	Jun 22, 2025 1y ago
CVE-2025-6453	medium	5.3/10	diyhi bbs API ForumManageAction.java add path traversal	Jun 22, 2025 1y ago
CVE-2025-6109	medium	5.3/10	javahongxi whatsmars InitializrController.java initialize path traversal	Jun 16, 2025 1y ago
CVE-2025-6108	medium	5.3/10	hansonwang99 Spring-Boot-In-Action File Upload ImageUploadService.java watermarkTest path traversal	Jun 16, 2025 1y ago
CVE-2025-6106	medium	5.3/10	WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery	Jun 16, 2025 1y ago
CVE-2025-6105	medium	5.3/10	jflyfox jfinal_cms HOME.java cross-site request forgery	Jun 16, 2025 1y ago
CVE-2025-5887	medium	5.1/10	jsnjfz WebStack-Guns File Upload UserMgrController.java cross site scripting	Jun 9, 2025 1y ago
CVE-2025-5879	medium	5.1/10	WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting	Jun 9, 2025 1y ago
CVE-2025-5680	medium	5.3/10	Shenzhen Dashi Tongzhou Information Technology AgileBPM Groovy Script SysScriptController.java executeScript deserialization	Jun 5, 2025 1y ago
CVE-2025-5679	medium	5.3/10	Shenzhen Dashi Tongzhou Information Technology AgileBPM SysToolsController.java parseStrByFreeMarker deserialization	Jun 5, 2025 1y ago
CVE-2025-5545	medium	5.3/10	aaluoxiang oa_system ProcedureController.java image path traversal	Jun 3, 2025 1y ago
CVE-2025-5544	medium	5.3/10	aaluoxiang oa_system UserpanelController.java image path traversal	Jun 3, 2025 1y ago
CVE-2025-23393	medium	5.2/10	Reflected XSS in spacewalk-java	May 27, 2025 1y ago
CVE-2025-23392	medium	5.2/10	Reflected XSS in SystemsController.java in spacewalk-java	May 26, 2025 1y ago
CVE-2025-5171	medium	5.3/10	llisoft MTA Maita Training System OpenController.java this.fileService.download unrestricted upload	May 26, 2025 1y ago
CVE-2025-5170	medium	5.3/10	llisoft MTA Maita Training System AdminShitiController.java AdminShitiListRequestVo sql injection	May 26, 2025 1y ago
CVE-2025-48368	medium	5.8/10	GroupOffice's DOM-Based XSS in all Date Input Fields Allows Arbitrary JavaScript Execution	May 22, 2025 1y ago
CVE-2024-5878	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library	May 20, 2025 1y ago
CVE-2025-4893	medium	5.3/10	jammy928 CoinExchange_CryptoExchange_Java File Upload Endpoint UploadFileUtil.java uploadLocalImage path traversal	May 18, 2025 1y ago
CVE-2025-4839	low	2.3/10	itwanger paicoding CrossUtil.java cross-domain policy	May 17, 2025 1y ago
CVE-2025-4838	medium	5.3/10	kanwangzjm Funiture Login LoginServlet.java doPost redirect	May 17, 2025 1y ago
CVE-2025-4768	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm PictureServiceImpl.java uploadPicture unrestricted upload	May 16, 2025 1y ago
CVE-2024-8090	—	—	JavaScript Logic <= 0.1 - CSRF to Stored XSS	May 15, 2025 1y ago
CVE-2024-13914	high	7.2/10	File Manager Advanced Shortcode <= Multiple Versions - Authenticated (Administrator+) Local JavaScript File Inclusion via Shortcode	May 15, 2025 1y ago
CVE-2025-3909	—	—	JavaScript Execution via Spoofed PDF Attachment and file:/// Link	May 14, 2025 1y ago
CVE-2025-4542	low	2.3/10	Freeebird Hotel 酒店管理系统 API SessionInterceptor.java cross-domain policy	May 11, 2025 1y ago
CVE-2025-4530	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm File FileController.java handleFileDownload path traversal	May 11, 2025 1y ago