Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,715

All time

Critical · Active

12,045

CVSS ≥ 9.0

New · 14 days

2,431

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 841–870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34342	high	7.1/10	react-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF	May 7, 2024 2y ago
CVE-2023-50233	high	8.8/10	Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-40472	high	7.8/10	PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-39476	critical	9.8/10	Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-39475	critical	9.8/10	Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2024-1637	medium	4.3/10	360 Javascript Viewer <= 1.7.12 - Missing Authorization to Plugin Settings Update	Apr 9, 2024 2y ago
CVE-2024-27899	high	8.8/10	Security misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine	Apr 9, 2024 2y ago
CVE-2024-3366	low	3.5/10	Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection	Apr 6, 2024 2y ago
CVE-2024-3311	medium	6.3/10	Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal	Apr 4, 2024 2y ago
CVE-2024-2828	medium	6.3/10	lakernote EasyAdmin IndexController.java thumbnail server-side request forgery	Mar 22, 2024 2y ago
CVE-2024-2227	critical	10.0/10	IdentityIQ JavaServer Faces File Path Traversal Vulnerability	Mar 22, 2024 2y ago
CVE-2022-4963	medium	5.5/10	Folio Spring Module Core Schema Name HibernateSchemaService.java dropSchema sql injection	Mar 20, 2024 2y ago
CVE-2024-22127	critical	9.1/10	Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)	Mar 12, 2024 2y ago
CVE-2024-2365	low	1.6/10	Musicshelf SHA-1 PinningTrustManager.java weak password hash	Mar 10, 2024 2y ago
CVE-2024-2064	medium	4.3/10	rahman SelectCours Template CacheController.java getCacheNames injection	Mar 1, 2024 2y ago
CVE-2024-27290	medium	6.1/10	Docassemble HTML and javascript injection	Feb 29, 2024 2y ago
CVE-2024-26129	medium	5.8/10	Prestashop vulnerable to path disclosure in JavaScript variable	Feb 19, 2024 2y ago
CVE-2024-24743	high	8.6/10	XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)	Feb 13, 2024 2y ago
CVE-2024-22126	medium	6.1/10	Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)	Feb 13, 2024 2y ago
CVE-2023-4552	medium	5.5/10	Java Database Connectivity (JDBC) URL Manipulation	Jan 29, 2024 2y ago
CVE-2024-0738	medium	6.3/10	个人开源 mldong DecisionModel.java ExpressionEngine code injection	Jan 19, 2024 2y ago
CVE-2024-23681	—	—	Artemis Java Test Sandbox Libary Load Escape	Jan 19, 2024 2y ago
CVE-2024-23683	—	—	Artemis Java Test Sandbox InvocationTargetException Subclass Escape	Jan 19, 2024 2y ago
CVE-2024-23680	—	—	AWS Encryption SDK for Java Improper Verification of Cryptographic Signature	Jan 19, 2024 2y ago
CVE-2024-23682	—	—	Artemis Java Test Sandbox Class Loading Escape	Jan 19, 2024 2y ago
CVE-2024-0601	medium	6.3/10	ZhongFuCheng3y Austin Email Message Template AustinFileUtils.java getRemoteUrl2File server-side request forgery	Jan 16, 2024 2y ago
CVE-2024-0599	low	3.5/10	Jspxcms Document Management Page InfoController.java cross site scripting	Jan 16, 2024 2y ago
CVE-2024-20721	medium	5.5/10	T5 Acrobat JS vulnerability - Exploitable crash via t5::javascript::get_page_num_words	Jan 15, 2024 2y ago
CVE-2024-0505	medium	5.5/10	ZhongFuCheng3y Austin Upload Material Menu MaterialController.java getFile unrestricted upload	Jan 13, 2024 2y ago
CVE-2024-0491	medium	5.3/10	Huaxia ERP UserController.java password recovery	Jan 13, 2024 2y ago