Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,509

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

698

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 841–870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-27268	medium	5.3/10	Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)	Mar 14, 2023 3y ago
CVE-2023-26460	medium	5.3/10	Improper Access Control in SAP NetWeaver AS Java (Cache Management Service)	Mar 14, 2023 3y ago
CVE-2023-24526	medium	5.3/10	Improper Access Control in SAP NetWeaver AS Java (Classload Service)	Mar 14, 2023 3y ago
CVE-2017-20181	medium	5.3/10	hgzojer Vocable Trainer VocableTrainerProvider.java path traversal	Mar 6, 2023 3y ago
CVE-2023-1191	medium	4.7/10	fastcms ZIP File TemplateController.java path traversal	Mar 6, 2023 3y ago
CVE-2023-1165	medium	5.5/10	Zhong Bang CRMEB Java list sql injection	Mar 3, 2023 3y ago
CVE-2023-0511	critical	9.1/10	AM Java Policy Agent path traversal	Feb 28, 2023 3y ago
CVE-2014-125087	medium	5.5/10	java-xmlbuilder xml external entity reference	Feb 19, 2023 3y ago
CVE-2015-10076	medium	5.5/10	dimtion Shaarlier Tag TagsSource.java createTag sql injection	Feb 9, 2023 3y ago
CVE-2023-0758	medium	6.3/10	glorylion JFinalOA SysOrg.java sql injection	Feb 9, 2023 3y ago
CVE-2022-46835	high	8.8/10	SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability	Jan 31, 2023 3y ago
CVE-2015-10068	medium	5.5/10	danynab movify-j ReviewServiceImpl.java getByMovieId sql injection	Jan 18, 2023 3y ago
CVE-2010-10006	low	2.6/10	michaelliao jopenid OpenIdManager.java getAuthentication timing discrepancy	Jan 17, 2023 3y ago
CVE-2015-10061	medium	5.5/10	evandro-machado Trabalho-Web2 ClienteDAO.java sql injection	Jan 17, 2023 3y ago
CVE-2013-10013	medium	5.5/10	Bricco Authenticator Plugin DBAuthenticator.java compare sql injection	Jan 17, 2023 3y ago
CVE-2018-25075	medium	4.6/10	karsany OBridge ProcedureDao.java getAllStandaloneProcedureAndFunction sql injection	Jan 15, 2023 3y ago
CVE-2015-10047	medium	5.5/10	KYUUBl school-register DBManager.java sql injection	Jan 15, 2023 3y ago
CVE-2015-10020	medium	5.5/10	ssn2013 cis450Project AddAppUser.java addUser sql injection	Jan 14, 2023 3y ago
CVE-2023-22491	high	8.1/10	gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection	Jan 13, 2023 3y ago
CVE-2014-125075	medium	5.5/10	gmail-servlet Model.java search sql injection	Jan 11, 2023 3y ago
CVE-2014-125074	medium	5.5/10	Nayshlok Voyager DatabaseAccess.java sql injection	Jan 11, 2023 3y ago
CVE-2023-0017	critical	9.4/10	Improper access control in SAP NetWeaver AS for Java	Jan 10, 2023 3y ago
CVE-2014-125071	medium	5.5/10	lukehutch Gribbit HttpRequestHandler.java messageReceived missing origin validation in websockets	Jan 9, 2023 3y ago
CVE-2014-125052	medium	5.5/10	JervenBolleman sparql-identifiers RegistryDao.java sql injection	Jan 6, 2023 3y ago
CVE-2018-25068	medium	6.3/10	devent globalpom-utils FileResourceManagerProvider.java createTmpDir temp file	Jan 6, 2023 3y ago
CVE-2016-15011	medium	5.5/10	e-Contract dssp SignResponseVerifier.java checkSignResponse xml external entity reference	Jan 6, 2023 3y ago
CVE-2022-4878	medium	5.5/10	JATOS ZIP ZipUtil.java ZipUtil path traversal	Jan 6, 2023 3y ago
CVE-2020-36641	medium	5.5/10	gturri aXMLRPC ResponseParser.java ResponseParser xml external entity reference	Jan 5, 2023 3y ago
CVE-2020-36640	medium	5.5/10	bonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference	Jan 5, 2023 3y ago
CVE-2014-125038	medium	5.5/10	IS_Projecto2 NewsBean.java sql injection	Jan 2, 2023 3y ago