Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,508

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

701

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 811–840 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-5257	low	3.5/10	WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal	Sep 29, 2023 2y ago
CVE-2023-30959	medium	4.1/10	Stored XSS via javascript URI in Apollo Change Requests comment	Sep 26, 2023 2y ago
CVE-2023-43642	high	7.5/10	Missing upper bound check on chunk length in snappy-java	Sep 25, 2023 2y ago
CVE-2023-5016	medium	6.3/10	spider-flow API DataSourceController.java DriverManager.getConnection deserialization	Sep 17, 2023 2y ago
CVE-2023-4748	medium	6.3/10	Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal	Sep 5, 2023 2y ago
CVE-2023-40580	high	8.1/10	Freighter mnemonic phrase may be accessed by Javascript through a private API	Aug 25, 2023 2y ago
CVE-2023-40030	medium	6.1/10	Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports	Aug 24, 2023 2y ago
CVE-2023-34040	medium	5.3/10	Java Deserialization vulnerability in Spring-Kafka When Improperly Configured	Aug 24, 2023 2y ago
CVE-2023-38687	medium	5.4/10	Execution of arbitrary JavaScript from Svelecte item names	Aug 14, 2023 2y ago
CVE-2023-36480	critical	9.8/10	Aerospike Java Client vulnerable to unsafe deserialization of server responses	Aug 4, 2023 2y ago
CVE-2022-40609	high	8.1/10	IBM SDK, Java Technology Edition code execution	Aug 2, 2023 2y ago
CVE-2023-29458	medium	5.9/10	Duktape 2.6 bug crashes JavaScript putting too many values in valstack.	Jul 13, 2023 2y ago
CVE-2023-31405	medium	5.3/10	Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)	Jul 11, 2023 2y ago
CVE-2023-34455	high	7.5/10	snappy-java's unchecked chunk length leads to DoS	Jun 15, 2023 3y ago
CVE-2023-34454	medium	5.9/10	snappy-java's Integer Overflow vulnerability in compress leads to DoS	Jun 15, 2023 3y ago
CVE-2023-34453	medium	5.9/10	snappy-java's Integer Overflow vulnerability in shuffle leads to DoS	Jun 15, 2023 3y ago
CVE-2023-3276	medium	5.5/10	Dromara HuTool XML Parsing Module XmlUtil.java readBySax xml external entity reference	Jun 15, 2023 3y ago
CVE-2023-34112	medium	4.3/10	JavaCPP project actions vulnerable to code injection	Jun 8, 2023 3y ago
CVE-2023-24540	—	—	Improper handling of JavaScript whitespace in html/template	May 11, 2023 3y ago
CVE-2023-30744	high	8.2/10	Improper access control during application start-up in SAP AS NetWeaver JAVA.	May 9, 2023 3y ago
CVE-2023-2473	medium	4.3/10	Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity	May 2, 2023 3y ago
CVE-2023-30441	high	7.5/10	IBM Java information disclosure	Apr 29, 2023 3y ago
CVE-2023-24527	medium	5.3/10	Improper Access Control in SAP NetWeaver AS Java for Deploy Service	Apr 11, 2023 3y ago
CVE-2018-25084	low	3.5/10	Ping Identity Self-Service Account Manager SSAMController.java cross site scripting	Apr 10, 2023 3y ago
CVE-2023-1741	medium	4.3/10	jeecg-boot Sleep Command SysDictMapper.java sql injection	Mar 30, 2023 3y ago
CVE-2023-28447	high	7.1/10	Cross site scripting vulnerability in Javascript escaping in smarty/smarty	Mar 28, 2023 3y ago
CVE-2022-38745	—	—	Apache OpenOffice: Empty entry in Java class path	Mar 24, 2023 3y ago
CVE-2023-1609	low	3.5/10	Zhong Bang CRMEB Java save cross site scripting	Mar 23, 2023 3y ago
CVE-2023-1608	medium	6.3/10	Zhong Bang CRMEB Java list getAdminList sql injection	Mar 23, 2023 3y ago
CVE-2023-1606	medium	6.3/10	novel-plus DictController.java sql injection	Mar 23, 2023 3y ago