Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,382

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,192

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 631–660 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-4514	medium	5.3/10	Zhengzhou Jiuhua Electronic Technology mayicms javascript.php sql injection	May 10, 2025 1y ago
CVE-2025-4511	medium	5.3/10	vector4wang spring-boot-quick quick-img2txt Img2TxtController.java ResponseEntity path traversal	May 10, 2025 1y ago
CVE-2025-4495	medium	5.1/10	JAdmin-JAVA JAdmin save cross site scripting	May 10, 2025 1y ago
CVE-2025-4494	medium	6.9/10	JAdmin-JAVA JAdmin Admin Backend NoNeedLoginController.java toLogin improper authentication	May 9, 2025 1y ago
CVE-2025-46762	high	7.1/10	Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata	May 6, 2025 1y ago
CVE-2025-4333	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java uploadFile unrestricted upload	May 6, 2025 1y ago
CVE-2025-4328	medium	5.1/10	fp2952 spring-cloud-base HTTP Header MvcController.java sendBack redirect	May 6, 2025 1y ago
CVE-2025-4260	medium	5.3/10	zhangyanbo2007 youkefu TemplateController.java impsave deserialization	May 5, 2025 1y ago
CVE-2025-4259	medium	5.3/10	newbee-mall UploadController.java upload unrestricted upload	May 5, 2025 1y ago
CVE-2025-4258	medium	5.3/10	zhangyanbo2007 youkefu MediaController.java upload unrestricted upload	May 5, 2025 1y ago
CVE-2025-4178	medium	5.3/10	xiaowei1118 java_server File Upload API FoodController.java path traversal	May 1, 2025 1y ago
CVE-2025-4175	medium	5.3/10	AlanBinu007 Spring-Boot-Advanced-Projects Upload Profile API Endpoint UserProfileController.java uploadUserProfileImage path traversal	May 1, 2025 1y ago
CVE-2025-4083	—	—	Process isolation bypass using "javascript:" URI links in cross-origin frames	Apr 29, 2025 1y ago
CVE-2025-4036	medium	5.3/10	201206030 Novel Chapter AuthorController.java updateBookChapter access control	Apr 28, 2025 1y ago
CVE-2025-4019	medium	6.9/10	20120630 Novel-Plus GeneratorController.java genCode missing authentication	Apr 28, 2025 1y ago
CVE-2025-4018	medium	6.9/10	20120630 Novel-Plus CrawlController.java addCrawlSource missing authentication	Apr 28, 2025 1y ago
CVE-2025-4017	medium	5.3/10	20120630 Novel-Plus LogController.java list improper authorization	Apr 28, 2025 1y ago
CVE-2025-4016	medium	5.3/10	20120630 Novel-Plus LogController.java deleteIndex improper authorization	Apr 28, 2025 1y ago
CVE-2025-4015	medium	6.9/10	20120630 Novel-Plus SessionController.java list missing authentication	Apr 28, 2025 1y ago
CVE-2025-3986	medium	5.3/10	Apereo CAS CasConfigurationMetadataServerController.java redos	Apr 27, 2025 1y ago
CVE-2025-3984	low	2.3/10	Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection	Apr 27, 2025 1y ago
CVE-2025-3843	medium	5.3/10	panhainan DS-Java cross-site request forgery	Apr 21, 2025 1y ago
CVE-2025-3842	medium	5.3/10	panhainan DS-Java FileUpload.java uploadUserPic.action code injection	Apr 21, 2025 1y ago
CVE-2025-3830	medium	5.3/10	kuangstudy KuangSimpleBBS QuestionController.java fileUpload unrestricted upload	Apr 20, 2025 1y ago
CVE-2025-3807	medium	5.3/10	zhenfeng13 My-BBS Endpoint UploadController.java upload unrestricted upload	Apr 19, 2025 1y ago
CVE-2025-3588	medium	4.8/10	joelittlejohn jsonschema2pojo JSON File SchemaRule.java apply stack-based overflow	Apr 14, 2025 1y ago
CVE-2025-3570	medium	5.1/10	JamesZBL/code-projects db-hospital-drug ContentController.java save cross site scripting	Apr 14, 2025 1y ago
CVE-2025-3569	medium	5.3/10	JamesZBL/code-projects db-hospital-drug ShiroConfig.java improper authorization	Apr 14, 2025 1y ago
CVE-2025-3567	medium	5.3/10	veal98 小牛肉 Echo 开源社区系统 Ticket LoginTicketInterceptor.java preHandle improper authorization	Apr 14, 2025 1y ago
CVE-2025-32699	low	2.1/10	Potential javascript injection attack enabled by Unicode normalization in Action API	Apr 10, 2025 1y ago