Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,612

All time

Critical · Active

12,039

CVSS ≥ 9.0

New · 14 days

2,376

Newly disclosed

Feed last synced

46 mins ago

Data freshness

Showing 781–810 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10594	medium	5.3/10	ESAFENET CDG FileDirectoryService.java docHistory sql injection	Oct 31, 2024 1y ago
CVE-2024-10502	medium	5.3/10	ESAFENET CDG FileDirectoryService.java getOneFileDirectory sql injection	Oct 30, 2024 1y ago
CVE-2024-10501	medium	5.3/10	ESAFENET CDG ExamCDGDocService.java findById sql injection	Oct 30, 2024 1y ago
CVE-2024-10500	medium	5.3/10	ESAFENET CDG HookWhiteListService.java sql injection	Oct 30, 2024 1y ago
CVE-2020-26310	high	8.7/10	GHSL-2020-305: Regular Expression Denial of Service (ReDoS) in Pure JavaScript HTML5 Parser	Oct 26, 2024 1y ago
CVE-2024-10379	medium	5.3/10	ESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversal	Oct 25, 2024 1y ago
CVE-2024-10378	medium	5.3/10	ESAFENET CDG CDGRenewApplicationService.java actionViewCDGRenewFile sql injection	Oct 25, 2024 1y ago
CVE-2024-10377	medium	5.3/10	ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injection	Oct 25, 2024 1y ago
CVE-2024-10376	medium	5.3/10	ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injection	Oct 25, 2024 1y ago
CVE-2024-10279	medium	5.3/10	ESAFENET CDG PrintPolicyService.java sql injection	Oct 23, 2024 1y ago
CVE-2024-10278	medium	5.3/10	ESAFENET CDG ReUserOrganiseService.java sql injection	Oct 23, 2024 1y ago
CVE-2024-10277	medium	5.3/10	ESAFENET CDG UsbKeyAjax.java sql injection	Oct 23, 2024 1y ago
CVE-2024-10135	medium	5.3/10	ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection	Oct 19, 2024 1y ago
CVE-2024-10134	medium	5.3/10	ESAFENET CDG MultiServerAjax.java connectLogout sql injection	Oct 19, 2024 1y ago
CVE-2024-10133	medium	5.3/10	ESAFENET CDG NetSecPolicyAjax.java updateNetSecPolicyPriority sql injection	Oct 19, 2024 1y ago
CVE-2024-10072	medium	5.3/10	ESAFENET CDG EncryptPolicyService.java actionAddEncryptPolicyGroup sql injection	Oct 17, 2024 1y ago
CVE-2024-10071	medium	5.3/10	ESAFENET CDG EncryptPolicyService.java actionUpdateEncryptPolicyEdit sql injection	Oct 17, 2024 1y ago
CVE-2024-10070	medium	5.3/10	ESAFENET CDG PolicyPushControlAction.java actionPolicyPush sql injection	Oct 17, 2024 1y ago
CVE-2024-10069	medium	5.3/10	ESAFENET CDG MailDecryptApplicationService.java actionPassMainApplication sql injection	Oct 17, 2024 1y ago
CVE-2024-8918	high	7.4/10	File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload	Oct 16, 2024 1y ago
CVE-2024-45292	medium	5.4/10	PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks	Oct 7, 2024 1y ago
CVE-2024-8743	medium	6.8/10	Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload	Oct 5, 2024 1y ago
CVE-2024-47561	critical	9.2/10	Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)	Oct 3, 2024 1y ago
CVE-2024-9344	medium	6.1/10	BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript <= 2.1.1 - Reflected Cross-Site Scripting	Oct 2, 2024 1y ago
CVE-2024-45745	medium	5.0/10	TopQuadrant TopBraid EDG JavaScript console XXE	Sep 27, 2024 1y ago
CVE-2024-9280	medium	5.1/10	kalvinGit kvf-admin FileUploadKit.java fileUpload unrestricted upload	Sep 27, 2024 1y ago
CVE-2024-8704	high	7.2/10	Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale	Sep 26, 2024 1y ago
CVE-2024-9048	medium	6.3/10	y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting	Sep 21, 2024 1y ago
CVE-2024-7254	high	8.7/10	Stack overflow in Protocol Buffers Java Lite	Sep 19, 2024 1y ago
CVE-2024-45799	high	7.3/10	Javascript Injection in Vending Info/Buyers Info Module in FluxCP	Sep 16, 2024 1y ago