Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,612

All time

Critical · Active

12,039

CVSS ≥ 9.0

New · 14 days

2,351

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 811–840 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-45283	medium	6.0/10	Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)	Sep 10, 2024 1y ago
CVE-2024-45280	medium	4.8/10	Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application)	Sep 10, 2024 1y ago
CVE-2024-7652	—	—	Type Confusion in Async Generators in Javascript Engine	Sep 6, 2024 1y ago
CVE-2024-45507	—	—	Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE	Sep 4, 2024 1y ago
CVE-2024-8367	medium	5.1/10	HM Courts & Tribunals Service Probate Back Office Markdown NotificationService.java injection	Sep 1, 2024 1y ago
CVE-2024-45045	medium	6.3/10	JavaScript Injection via url encoded values in links in Collabora Office Android	Aug 29, 2024 1y ago
CVE-2024-7775	medium	5.5/10	Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads	Aug 20, 2024 2y ago
CVE-2024-43357	high	8.6/10	JavaScript specification issue may lead to type confusion and pointer dereference in implementations	Aug 15, 2024 2y ago
CVE-2024-27267	medium	5.9/10	IBM SDK, Java Technology Edition denial of service	Aug 14, 2024 2y ago
CVE-2024-28986	critical	9.8/10	SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability	Aug 13, 2024 2y ago
CVE-2024-33005	medium	6.3/10	Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server	Aug 13, 2024 2y ago
CVE-2024-42374	high	8.2/10	XML injection in SAP BEx Web Java Runtime Export Web Service	Aug 13, 2024 2y ago
CVE-2024-7552	medium	5.3/10	DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection	Aug 6, 2024 2y ago
CVE-2024-41948	low	3.0/10	biscuit-java vulnerable to public key confusion in third party block	Aug 1, 2024 2y ago
CVE-2024-25638	high	8.9/10	DNSJava DNSSEC Bypass	Jul 22, 2024 2y ago
CVE-2024-5971	high	7.5/10	Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket	Jul 8, 2024 2y ago
CVE-2024-34696	medium	4.5/10	GeoServer's Server Status shows sensitive environmental variables and Java properties	Jul 1, 2024 2y ago
CVE-2024-38374	high	7.5/10	Improper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java	Jun 28, 2024 2y ago
CVE-2024-36117	high	8.6/10	Path traversal while serving Reposilite javadoc expanded files	Jun 19, 2024 2y ago
CVE-2024-36116	high	7.5/10	Path traversal in Reposilite javadoc file expansion	Jun 19, 2024 2y ago
CVE-2024-37902	critical	10.0/10	Path thraversal in DeepJavaLibrary	Jun 17, 2024 2y ago
CVE-2024-28164	medium	5.3/10	Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)	Jun 11, 2024 2y ago
CVE-2024-34688	high	7.5/10	Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)	Jun 11, 2024 2y ago
CVE-2024-2914	high	7.8/10	TarSlip Vulnerability in deepjavalibrary/djl	Jun 6, 2024 2y ago
CVE-2024-36120	high	8.2/10	javascript-deobfuscator crafted payload can lead to code execution	May 31, 2024 2y ago
CVE-2024-5351	medium	5.3/10	anji-plus AJ-Report Javascript getValueFromJs deserialization	May 26, 2024 2y ago
CVE-2024-30054	medium	6.5/10	Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability	May 14, 2024 2y ago
CVE-2024-29894	medium	5.4/10	Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API	May 13, 2024 2y ago
CVE-2023-38264	medium	5.9/10	IBM SDK, Java Technology Edition denial of service	May 10, 2024 2y ago
CVE-2024-34342	high	7.1/10	react-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF	May 7, 2024 2y ago