Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,399

All time

Critical · Active

12,013

CVSS ≥ 9.0

New · 14 days

2,205

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 661–690 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-3413	medium	5.3/10	opplus springboot-admin SysGeneratorController.java code deserialization	Apr 8, 2025 1y ago
CVE-2025-3412	medium	5.3/10	mymagicpower AIAS InferController.java server-side request forgery	Apr 8, 2025 1y ago
CVE-2025-3411	medium	5.3/10	mymagicpower AIAS AsrController.java server-side request forgery	Apr 8, 2025 1y ago
CVE-2025-3410	medium	5.3/10	mymagicpower AIAS LocalStorageController.java unrestricted upload	Apr 8, 2025 1y ago
CVE-2025-3398	medium	5.3/10	lenve VBlog WebSecurityConfig.java configure access control	Apr 8, 2025 1y ago
CVE-2025-3392	medium	5.1/10	hailey888 oa_system Backend MailController.java save cross site scripting	Apr 8, 2025 1y ago
CVE-2025-3391	medium	5.1/10	hailey888 oa_system Backend AddrController. java outAddress cross site scripting	Apr 8, 2025 1y ago
CVE-2025-3390	medium	5.1/10	hailey888 oa_system Backend DaymanageController.java addandchangeday cross site scripting	Apr 8, 2025 1y ago
CVE-2025-3389	medium	5.1/10	hailey888 oa_system Backend InformManageController.java testMess cross site scripting	Apr 7, 2025 1y ago
CVE-2025-3388	medium	5.3/10	hailey888 oa_system Frontend LoginsController.java loginCheck cross site scripting	Apr 7, 2025 1y ago
CVE-2025-3382	medium	5.3/10	joey-zhou xiaozhi-esp32-server-java update sql injection	Apr 7, 2025 1y ago
CVE-2025-3381	medium	5.3/10	zhangyanbo2007 youkefu File Upload WebIMController.java path traversal	Apr 7, 2025 1y ago
CVE-2025-3324	medium	5.3/10	godcheese/code-projects Nimrod FileRestController.java unrestricted upload	Apr 6, 2025 1y ago
CVE-2025-3323	medium	5.3/10	godcheese/code-projects Nimrod ViewMenuCategoryRestController.java searchAllByName sql injection	Apr 6, 2025 1y ago
CVE-2025-3318	medium	5.3/10	Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 ShangpinleixingController.java page sql injection	Apr 6, 2025 1y ago
CVE-2025-3305	medium	5.3/10	1902756969/code-projects IKUN_Library Borrow MvcConfig.java addInterceptors access control	Apr 5, 2025 1y ago
CVE-2025-3245	medium	5.3/10	itsourcecode Library Management System Forgot.java search sql injection	Apr 4, 2025 1y ago
CVE-2025-3241	medium	5.3/10	zhangyanbo2007 youkefu XML Document CallCenterRouterController.java xml external entity reference	Apr 4, 2025 1y ago
CVE-2025-3202	medium	6.9/10	ageerle ruoyi-ai SysNoticeController.java improper authorization	Apr 4, 2025 1y ago
CVE-2025-3199	medium	6.9/10	ageerle ruoyi-ai API Interface SysModelController.java improper authorization	Apr 4, 2025 1y ago
CVE-2025-2946	critical	9.1/10	Cross-Site Vulnerability(XSS) due to arbitrary HTML/JavaScript gets executed while query result rendering in Query Tool and View/Edit Data Tool of pgAdmin 4	Apr 3, 2025 1y ago
CVE-2024-9416	medium	6.4/10	Modula Image Gallery <= 2.10.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library	Apr 3, 2025 1y ago
CVE-2025-30065	critical	10.0/10	Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata	Apr 1, 2025 1y ago
CVE-2025-31629	medium	6.5/10	WordPress Infusionsoft Web Form JavaScript plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	Mar 31, 2025 1y ago
CVE-2025-2835	medium	5.3/10	zhangyd-c OneBlog RestApiController.java autoLink server-side request forgery	Mar 27, 2025 1y ago
CVE-2025-2491	medium	4.8/10	Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting	Mar 18, 2025 1y ago
CVE-2025-2490	medium	4.8/10	Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting	Mar 18, 2025 1y ago
CVE-2025-2365	medium	5.3/10	crmeb_java WeChatMessageController.java webHook xml external entity reference	Mar 17, 2025 1y ago
CVE-2025-2364	medium	5.1/10	lenve VBlog ArticleService.java addNewArticle cross site scripting	Mar 17, 2025 1y ago
CVE-2025-2363	medium	5.3/10	lenve VBlog ArticleController.java uploadImg path traversal	Mar 17, 2025 1y ago