Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,501

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

695

Newly disclosed

Feed last synced

9 hrs ago

Data freshness

Showing 751–780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34688	high	7.5/10	Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)	Jun 11, 2024 2y ago
CVE-2024-2914	high	7.8/10	TarSlip Vulnerability in deepjavalibrary/djl	Jun 6, 2024 2y ago
CVE-2024-36120	high	8.2/10	javascript-deobfuscator crafted payload can lead to code execution	May 31, 2024 2y ago
CVE-2024-5351	medium	5.3/10	anji-plus AJ-Report Javascript getValueFromJs deserialization	May 26, 2024 2y ago
CVE-2024-30054	medium	6.5/10	Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability	May 14, 2024 2y ago
CVE-2024-29894	medium	5.4/10	Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API	May 13, 2024 2y ago
CVE-2023-38264	medium	5.9/10	IBM SDK, Java Technology Edition denial of service	May 10, 2024 2y ago
CVE-2024-34342	high	7.1/10	react-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF	May 7, 2024 2y ago
CVE-2023-50233	high	8.8/10	Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-40472	high	7.8/10	PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-39476	critical	9.8/10	Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-39475	critical	9.8/10	Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2024-1637	medium	4.3/10	360 Javascript Viewer <= 1.7.12 - Missing Authorization to Plugin Settings Update	Apr 9, 2024 2y ago
CVE-2024-27899	high	8.8/10	Security misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine	Apr 9, 2024 2y ago
CVE-2024-3366	low	3.5/10	Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection	Apr 6, 2024 2y ago
CVE-2024-3311	medium	6.3/10	Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal	Apr 4, 2024 2y ago
CVE-2024-2828	medium	6.3/10	lakernote EasyAdmin IndexController.java thumbnail server-side request forgery	Mar 22, 2024 2y ago
CVE-2024-2227	critical	10.0/10	IdentityIQ JavaServer Faces File Path Traversal Vulnerability	Mar 22, 2024 2y ago
CVE-2022-4963	medium	5.5/10	Folio Spring Module Core Schema Name HibernateSchemaService.java dropSchema sql injection	Mar 20, 2024 2y ago
CVE-2024-22127	critical	9.1/10	Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)	Mar 12, 2024 2y ago
CVE-2024-2365	low	1.6/10	Musicshelf SHA-1 PinningTrustManager.java weak password hash	Mar 10, 2024 2y ago
CVE-2024-2064	medium	4.3/10	rahman SelectCours Template CacheController.java getCacheNames injection	Mar 1, 2024 2y ago
CVE-2024-27290	medium	6.1/10	Docassemble HTML and javascript injection	Feb 29, 2024 2y ago
CVE-2024-26129	medium	5.8/10	Prestashop vulnerable to path disclosure in JavaScript variable	Feb 19, 2024 2y ago
CVE-2024-24743	high	8.6/10	XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)	Feb 13, 2024 2y ago
CVE-2024-22126	medium	6.1/10	Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)	Feb 13, 2024 2y ago
CVE-2023-4552	medium	5.5/10	Java Database Connectivity (JDBC) URL Manipulation	Jan 29, 2024 2y ago
CVE-2024-0738	medium	6.3/10	个人开源 mldong DecisionModel.java ExpressionEngine code injection	Jan 19, 2024 2y ago
CVE-2024-23681	—	—	Artemis Java Test Sandbox Libary Load Escape	Jan 19, 2024 2y ago
CVE-2024-23683	—	—	Artemis Java Test Sandbox InvocationTargetException Subclass Escape	Jan 19, 2024 2y ago