Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,508

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

702

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 781–810 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-23680	—	—	AWS Encryption SDK for Java Improper Verification of Cryptographic Signature	Jan 19, 2024 2y ago
CVE-2024-23682	—	—	Artemis Java Test Sandbox Class Loading Escape	Jan 19, 2024 2y ago
CVE-2024-0601	medium	6.3/10	ZhongFuCheng3y Austin Email Message Template AustinFileUtils.java getRemoteUrl2File server-side request forgery	Jan 16, 2024 2y ago
CVE-2024-0599	low	3.5/10	Jspxcms Document Management Page InfoController.java cross site scripting	Jan 16, 2024 2y ago
CVE-2024-20721	medium	5.5/10	T5 Acrobat JS vulnerability - Exploitable crash via t5::javascript::get_page_num_words	Jan 15, 2024 2y ago
CVE-2024-0505	medium	5.5/10	ZhongFuCheng3y Austin Upload Material Menu MaterialController.java getFile unrestricted upload	Jan 13, 2024 2y ago
CVE-2024-0491	medium	5.3/10	Huaxia ERP UserController.java password recovery	Jan 13, 2024 2y ago
CVE-2024-21637	high	7.7/10	XSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Mode	Jan 11, 2024 2y ago
CVE-2024-0301	medium	6.3/10	fhs-opensource iparking PayTempOrderAction.java getData sql injection	Jan 8, 2024 2y ago
CVE-2024-21634	high	7.5/10	Ion Java StackOverflow vulnerability	Jan 3, 2024 2y ago
CVE-2024-0195	medium	6.3/10	spider-flow FunctionController.java FunctionService.saveFunction code injection	Jan 2, 2024 2y ago
CVE-2023-7171	low	2.4/10	Novel-Plus Friendly Link FriendLinkController.java cross site scripting	Dec 29, 2023 2y ago
CVE-2023-7148	medium	5.0/10	ShifuML shifu Java Expression Language DataPurifier.java code injection	Dec 29, 2023 2y ago
CVE-2023-50823	medium	6.5/10	WordPress CSS & JavaScript Toolbox Plugin <= 11.7 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-47265	—	—	Apache Airflow: DAG Params alllow to embed unchecked Javascript	Dec 21, 2023 2y ago
CVE-2023-50422	critical	9.1/10	Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)	Dec 12, 2023 2y ago
CVE-2023-49580	high	7.3/10	Information disclosure in SAP GUI for Windows and SAP GUI for Java	Dec 12, 2023 2y ago
CVE-2023-49693	critical	9.8/10	NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol	Nov 29, 2023 2y ago
CVE-2023-6299	medium	4.3/10	Apryse iText Reference Table PdfDocument.java memory leak	Nov 26, 2023 2y ago
CVE-2023-6298	medium	4.3/10	Apryse iText PdfDocument.java main array index	Nov 26, 2023 2y ago
CVE-2021-37942	high	7.0/10	APM Java Agent Local Privilege Escalation	Nov 22, 2023 2y ago
CVE-2023-42480	medium	5.3/10	Information Disclosure in NetWeaver AS Java Logon	Nov 14, 2023 2y ago
CVE-2023-39913	—	—	Apache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats	Nov 8, 2023 2y ago
CVE-2023-39219	high	7.5/10	Admin Console Denial of Service via Java class enumeration	Oct 25, 2023 2y ago
CVE-2023-46120	medium	4.9/10	RabbitMQ Java client's lack of message size limitation leads to remote DoS attack	Oct 24, 2023 2y ago
CVE-2023-46126	low	3.9/10	Fides JavaScript Injection Vulnerability in Privacy Center URL	Oct 24, 2023 2y ago
CVE-2023-5072	high	7.5/10	DoS Vulnerability in JSON-Java	Oct 12, 2023 2y ago
CVE-2023-32724	critical	9.1/10	JavaScript engine memory pointers are directly available for Zabbix users for modification	Oct 12, 2023 2y ago
CVE-2023-42477	medium	6.5/10	Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)	Oct 10, 2023 2y ago
CVE-2023-39410	—	—	Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK	Sep 29, 2023 2y ago