Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

695

Newly disclosed

Feed last synced

8 hrs ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-47561	critical	9.2/10	Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)	Oct 3, 2024 1y ago
CVE-2024-9344	medium	6.1/10	BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript <= 2.1.1 - Reflected Cross-Site Scripting	Oct 2, 2024 1y ago
CVE-2024-45745	medium	5.0/10	TopQuadrant TopBraid EDG JavaScript console XXE	Sep 27, 2024 1y ago
CVE-2024-9280	medium	5.1/10	kalvinGit kvf-admin FileUploadKit.java fileUpload unrestricted upload	Sep 27, 2024 1y ago
CVE-2024-8704	high	7.2/10	Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale	Sep 26, 2024 1y ago
CVE-2024-9048	medium	6.3/10	y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting	Sep 21, 2024 1y ago
CVE-2024-7254	high	8.7/10	Stack overflow in Protocol Buffers Java Lite	Sep 19, 2024 1y ago
CVE-2024-45799	high	7.3/10	Javascript Injection in Vending Info/Buyers Info Module in FluxCP	Sep 16, 2024 1y ago
CVE-2024-45283	medium	6.0/10	Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)	Sep 10, 2024 1y ago
CVE-2024-45280	medium	4.8/10	Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application)	Sep 10, 2024 1y ago
CVE-2024-7652	—	—	Type Confusion in Async Generators in Javascript Engine	Sep 6, 2024 1y ago
CVE-2024-45507	—	—	Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE	Sep 4, 2024 1y ago
CVE-2024-8367	medium	5.1/10	HM Courts & Tribunals Service Probate Back Office Markdown NotificationService.java injection	Sep 1, 2024 1y ago
CVE-2024-45045	medium	6.3/10	JavaScript Injection via url encoded values in links in Collabora Office Android	Aug 29, 2024 1y ago
CVE-2024-7775	medium	5.5/10	Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads	Aug 20, 2024 1y ago
CVE-2024-43357	high	8.6/10	JavaScript specification issue may lead to type confusion and pointer dereference in implementations	Aug 15, 2024 1y ago
CVE-2024-27267	medium	5.9/10	IBM SDK, Java Technology Edition denial of service	Aug 14, 2024 1y ago
CVE-2024-28986	critical	9.8/10	SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability	Aug 13, 2024 1y ago
CVE-2024-33005	medium	6.3/10	Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server	Aug 13, 2024 1y ago
CVE-2024-42374	high	8.2/10	XML injection in SAP BEx Web Java Runtime Export Web Service	Aug 13, 2024 1y ago
CVE-2024-7552	medium	5.3/10	DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection	Aug 6, 2024 1y ago
CVE-2024-41948	low	3.0/10	biscuit-java vulnerable to public key confusion in third party block	Aug 1, 2024 1y ago
CVE-2024-25638	high	8.9/10	DNSJava DNSSEC Bypass	Jul 22, 2024 1y ago
CVE-2024-5971	high	7.5/10	Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket	Jul 8, 2024 1y ago
CVE-2024-34696	medium	4.5/10	GeoServer's Server Status shows sensitive environmental variables and Java properties	Jul 1, 2024 1y ago
CVE-2024-38374	high	7.5/10	Improper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java	Jun 28, 2024 1y ago
CVE-2024-36117	high	8.6/10	Path traversal while serving Reposilite javadoc expanded files	Jun 19, 2024 2y ago
CVE-2024-36116	high	7.5/10	Path traversal in Reposilite javadoc file expansion	Jun 19, 2024 2y ago
CVE-2024-37902	critical	10.0/10	Path thraversal in DeepJavaLibrary	Jun 17, 2024 2y ago
CVE-2024-28164	medium	5.3/10	Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)	Jun 11, 2024 2y ago