Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

699

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 631–660 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-0406	medium	5.3/10	liujianview gymxmjpa SubjectController.java SubjectDaoImpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0405	medium	5.3/10	liujianview gymxmjpa GoodsController.java GoodsDaoImpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0404	medium	5.3/10	liujianview gymxmjpa CoachController.java CoachController sql injection	Jan 13, 2025 1y ago
CVE-2025-0402	medium	5.3/10	1902756969 reggie CommonController.java upload unrestricted upload	Jan 12, 2025 1y ago
CVE-2025-0401	medium	6.9/10	1902756969 reggie CommonController.java download path traversal	Jan 12, 2025 1y ago
CVE-2025-0399	medium	5.1/10	StarSea99 starsea-mall uploadController.java UploadController unrestricted upload	Jan 12, 2025 1y ago
CVE-2025-0391	medium	5.3/10	Guangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate sql injection	Jan 11, 2025 1y ago
CVE-2025-23108	—	—	Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI	Jan 11, 2025 1y ago
CVE-2024-13212	medium	5.3/10	SingMR HouseRent AddHouseController.java upload unrestricted upload	Jan 9, 2025 1y ago
CVE-2024-13211	medium	5.3/10	SingMR HouseRent AdminController.java access control	Jan 9, 2025 1y ago
CVE-2024-13210	medium	5.1/10	donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload	Jan 9, 2025 1y ago
CVE-2024-13202	medium	5.1/10	wander-chu SpringBoot-Blog Blog Article PageController.java modifiyArticle cross site scripting	Jan 9, 2025 1y ago
CVE-2024-13201	medium	5.1/10	wander-chu SpringBoot-Blog Admin Attachment AttachtController.java upload unrestricted upload	Jan 9, 2025 1y ago
CVE-2024-13200	medium	6.9/10	wander-chu SpringBoot-Blog HTTP POST Request BaseInterceptor.java preHandle access control	Jan 9, 2025 1y ago
CVE-2024-13197	medium	5.3/10	donglight bookstore电商书城系统说明 AdminUserControlle.java updateUser cross site scripting	Jan 9, 2025 1y ago
CVE-2024-13196	medium	5.3/10	donglight bookstore电商书城系统说明 BookInfoController.java BookSearchList cross site scripting	Jan 9, 2025 1y ago
CVE-2024-13195	medium	5.3/10	donglight bookstore电商书城系统说明 HttpUtil.java getHtml server-side request forgery	Jan 8, 2025 1y ago
CVE-2024-13192	medium	5.3/10	ZeroWdd myblog BlogController.java update cross site scripting	Jan 8, 2025 1y ago
CVE-2024-13191	medium	5.3/10	ZeroWdd myblog uploadController.java upload unrestricted upload	Jan 8, 2025 1y ago
CVE-2024-13189	medium	6.9/10	ZeroWdd myblog MyBlogMvcConfig.java permission	Jan 8, 2025 1y ago
CVE-2025-0241	—	—	Memory corruption when using JavaScript Text Segmentation	Jan 7, 2025 1y ago
CVE-2025-0240	—	—	Compartment mismatch when parsing JavaScript JSON module	Jan 7, 2025 1y ago
CVE-2024-13145	medium	5.3/10	zhenfeng13 My-Blog uploadController. java upload unrestricted upload	Jan 6, 2025 1y ago
CVE-2024-13144	medium	5.3/10	zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted upload	Jan 6, 2025 1y ago
CVE-2024-13143	medium	5.1/10	ZeroWdd studentmanager PermissionController. java submitAddPermission cross site scripting	Jan 5, 2025 1y ago
CVE-2024-13142	medium	5.1/10	ZeroWdd studentmanager RoleController. java submitAddRole cross site scripting	Jan 5, 2025 1y ago
CVE-2024-13136	medium	5.3/10	wangl1989 mysiteforme ShiroConfig.java rememberMeManager deserialization	Jan 5, 2025 1y ago
CVE-2024-13134	medium	5.3/10	ZeroWdd studentmanager TeacherController. java editTeacher unrestricted upload	Jan 5, 2025 1y ago
CVE-2024-13133	medium	5.3/10	ZeroWdd studentmanager StudentController. java editStudent unrestricted upload	Jan 5, 2025 1y ago
CVE-2024-56412	medium	4.8/10	PhpSpreadsheet vulnerable to bypass of the XSS sanitizer using the javascript protocol and special characters	Jan 3, 2025 1y ago