Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,533

All time

Critical · Active

12,031

CVSS ≥ 9.0

New · 14 days

2,326

Newly disclosed

Feed last synced

12 mins ago

Data freshness

Showing 691–720 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-2322	medium	6.9/10	274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials	Mar 15, 2025 1y ago
CVE-2025-2112	medium	5.3/10	user-xiangpeng yaoqishan MediaInfoService.java getMediaLisByFilter sql injection	Mar 8, 2025 1y ago
CVE-2024-5667	medium	6.4/10	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library	Mar 5, 2025 1y ago
CVE-2025-1695	medium	5.3/10	NGINX Unit Java Vulnerability	Mar 4, 2025 1y ago
CVE-2024-9285	medium	5.3/10	Tu Yafeng Via Browser Javascript Bridge cross site scripting	Feb 27, 2025 1y ago
CVE-2025-1584	medium	5.3/10	opensolon Solon StaticMappings.java path traversal	Feb 23, 2025 1y ago
CVE-2025-1225	medium	5.3/10	ywoa WXCallBack Interface XMLParse.java extract xml external entity reference	Feb 12, 2025 1y ago
CVE-2025-24869	medium	4.3/10	Information Disclosure vulnerability in SAP NetWeaver Application Server Java	Feb 11, 2025 1y ago
CVE-2024-11831	medium	5.4/10	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	Feb 10, 2025 1y ago
CVE-2025-0982	critical	9.4/10	Sandbox Escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine)	Feb 6, 2025 1y ago
CVE-2025-23210	medium	4.8/10	Bypass XSS sanitizer using the javascript protocol and special characters in phpoffice/phpspreadsheet	Feb 3, 2025 1y ago
CVE-2025-0851	critical	9.3/10	Path traversal issue in Deep Java Library	Jan 29, 2025 1y ago
CVE-2025-0705	medium	6.9/10	JoeyBling bootplus QrCodeController.java qrCode redirect	Jan 24, 2025 1y ago
CVE-2025-0704	medium	6.9/10	JoeyBling bootplus QrCodeController.java qrCode resource consumption	Jan 24, 2025 1y ago
CVE-2025-0703	medium	5.3/10	JoeyBling bootplus SysFileController.java path traversal	Jan 24, 2025 1y ago
CVE-2025-0702	medium	5.3/10	JoeyBling bootplus SysFileController.java unrestricted upload	Jan 24, 2025 1y ago
CVE-2025-0558	medium	5.3/10	TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection	Jan 18, 2025 1y ago
CVE-2025-23026	medium	6.1/10	HTML templates containing Javascript template strings are subject to XSS in jte	Jan 13, 2025 1y ago
CVE-2025-0410	medium	5.3/10	liujianview gymxmjpa MenberConntroller.java MenberDaoInpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0409	medium	5.3/10	liujianview gymxmjpa MembertypeController.java MembertypeDaoImpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0408	medium	5.3/10	liujianview gymxmjpa LoosController.java LoosDaoImpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0407	medium	5.3/10	liujianview gymxmjpa EquipmentController.java EquipmentDaoImpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0406	medium	5.3/10	liujianview gymxmjpa SubjectController.java SubjectDaoImpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0405	medium	5.3/10	liujianview gymxmjpa GoodsController.java GoodsDaoImpl sql injection	Jan 13, 2025 1y ago
CVE-2025-0404	medium	5.3/10	liujianview gymxmjpa CoachController.java CoachController sql injection	Jan 13, 2025 1y ago
CVE-2025-0402	medium	5.3/10	1902756969 reggie CommonController.java upload unrestricted upload	Jan 12, 2025 1y ago
CVE-2025-0401	medium	6.9/10	1902756969 reggie CommonController.java download path traversal	Jan 12, 2025 1y ago
CVE-2025-0399	medium	5.1/10	StarSea99 starsea-mall uploadController.java UploadController unrestricted upload	Jan 12, 2025 1y ago
CVE-2025-0391	medium	5.3/10	Guangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate sql injection	Jan 11, 2025 1y ago
CVE-2025-23108	—	—	Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI	Jan 11, 2025 1y ago