Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,533

All time

Critical · Active

12,031

CVSS ≥ 9.0

New · 14 days

2,326

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-13212	medium	5.3/10	SingMR HouseRent AddHouseController.java upload unrestricted upload	Jan 9, 2025 1y ago
CVE-2024-13211	medium	5.3/10	SingMR HouseRent AdminController.java access control	Jan 9, 2025 1y ago
CVE-2024-13210	medium	5.1/10	donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload	Jan 9, 2025 1y ago
CVE-2024-13202	medium	5.1/10	wander-chu SpringBoot-Blog Blog Article PageController.java modifiyArticle cross site scripting	Jan 9, 2025 1y ago
CVE-2024-13201	medium	5.1/10	wander-chu SpringBoot-Blog Admin Attachment AttachtController.java upload unrestricted upload	Jan 9, 2025 1y ago
CVE-2024-13200	medium	6.9/10	wander-chu SpringBoot-Blog HTTP POST Request BaseInterceptor.java preHandle access control	Jan 9, 2025 1y ago
CVE-2024-13197	medium	5.3/10	donglight bookstore电商书城系统说明 AdminUserControlle.java updateUser cross site scripting	Jan 9, 2025 1y ago
CVE-2024-13196	medium	5.3/10	donglight bookstore电商书城系统说明 BookInfoController.java BookSearchList cross site scripting	Jan 9, 2025 1y ago
CVE-2024-13195	medium	5.3/10	donglight bookstore电商书城系统说明 HttpUtil.java getHtml server-side request forgery	Jan 8, 2025 1y ago
CVE-2024-13192	medium	5.3/10	ZeroWdd myblog BlogController.java update cross site scripting	Jan 8, 2025 1y ago
CVE-2024-13191	medium	5.3/10	ZeroWdd myblog uploadController.java upload unrestricted upload	Jan 8, 2025 1y ago
CVE-2024-13189	medium	6.9/10	ZeroWdd myblog MyBlogMvcConfig.java permission	Jan 8, 2025 1y ago
CVE-2025-0241	—	—	Memory corruption when using JavaScript Text Segmentation	Jan 7, 2025 1y ago
CVE-2025-0240	—	—	Compartment mismatch when parsing JavaScript JSON module	Jan 7, 2025 1y ago
CVE-2024-13145	medium	5.3/10	zhenfeng13 My-Blog uploadController. java upload unrestricted upload	Jan 6, 2025 1y ago
CVE-2024-13144	medium	5.3/10	zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted upload	Jan 6, 2025 1y ago
CVE-2024-13143	medium	5.1/10	ZeroWdd studentmanager PermissionController. java submitAddPermission cross site scripting	Jan 5, 2025 1y ago
CVE-2024-13142	medium	5.1/10	ZeroWdd studentmanager RoleController. java submitAddRole cross site scripting	Jan 5, 2025 1y ago
CVE-2024-13136	medium	5.3/10	wangl1989 mysiteforme ShiroConfig.java rememberMeManager deserialization	Jan 5, 2025 1y ago
CVE-2024-13134	medium	5.3/10	ZeroWdd studentmanager TeacherController. java editTeacher unrestricted upload	Jan 5, 2025 1y ago
CVE-2024-13133	medium	5.3/10	ZeroWdd studentmanager StudentController. java editStudent unrestricted upload	Jan 5, 2025 1y ago
CVE-2024-56412	medium	4.8/10	PhpSpreadsheet vulnerable to bypass of the XSS sanitizer using the javascript protocol and special characters	Jan 3, 2025 1y ago
CVE-2025-21610	medium	5.3/10	Trix allows Cross-site Scripting via `javascript:` url in a link	Jan 3, 2025 1y ago
CVE-2024-13110	medium	5.3/10	Beijing Yunfan Internet Technology Yunfan Learning Examination System Exam Answer PaperController.java， information disclosure	Jan 2, 2025 1y ago
CVE-2024-13022	medium	5.3/10	taisan tarzan-cms Article Management UploadController.java UploadResponse unrestricted upload	Dec 29, 2024 1y ago
CVE-2024-55887	high	8.6/10	Ucum-java has an XXE vulnerability in XML parsing	Dec 13, 2024 1y ago
CVE-2024-12271	medium	4.4/10	360 Javascript Viewer <= 1.7.29 - Authenticated (Administrator+) Stored Cross-Site Scripting	Dec 12, 2024 1y ago
CVE-2024-12482	medium	5.3/10	cjbi wetech-cms Database Backup BackupFileUtil.java backup path traversal	Dec 11, 2024 1y ago
CVE-2024-12481	medium	5.3/10	cjbi wetech-cms UserDao.java findUser sql injection	Dec 11, 2024 1y ago
CVE-2024-12480	medium	5.3/10	cjbi wetech-cms TopicDao.java searchTopic sql injection	Dec 11, 2024 1y ago