Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,715

All time

Critical · Active

12,045

CVSS ≥ 9.0

New · 14 days

2,415

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 871–900 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-21637	high	7.7/10	XSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Mode	Jan 11, 2024 2y ago
CVE-2024-0301	medium	6.3/10	fhs-opensource iparking PayTempOrderAction.java getData sql injection	Jan 8, 2024 2y ago
CVE-2024-21634	high	7.5/10	Ion Java StackOverflow vulnerability	Jan 3, 2024 2y ago
CVE-2024-0195	medium	6.3/10	spider-flow FunctionController.java FunctionService.saveFunction code injection	Jan 2, 2024 2y ago
CVE-2023-7171	low	2.4/10	Novel-Plus Friendly Link FriendLinkController.java cross site scripting	Dec 29, 2023 2y ago
CVE-2023-7148	medium	5.0/10	ShifuML shifu Java Expression Language DataPurifier.java code injection	Dec 29, 2023 2y ago
CVE-2023-50823	medium	6.5/10	WordPress CSS & JavaScript Toolbox Plugin <= 11.7 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-47265	—	—	Apache Airflow: DAG Params alllow to embed unchecked Javascript	Dec 21, 2023 2y ago
CVE-2023-50422	critical	9.1/10	Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)	Dec 12, 2023 2y ago
CVE-2023-49580	high	7.3/10	Information disclosure in SAP GUI for Windows and SAP GUI for Java	Dec 12, 2023 2y ago
CVE-2023-49693	critical	9.8/10	NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol	Nov 29, 2023 2y ago
CVE-2023-6299	medium	4.3/10	Apryse iText Reference Table PdfDocument.java memory leak	Nov 26, 2023 2y ago
CVE-2023-6298	medium	4.3/10	Apryse iText PdfDocument.java main array index	Nov 26, 2023 2y ago
CVE-2021-37942	high	7.0/10	APM Java Agent Local Privilege Escalation	Nov 22, 2023 2y ago
CVE-2023-42480	medium	5.3/10	Information Disclosure in NetWeaver AS Java Logon	Nov 14, 2023 2y ago
CVE-2023-39913	—	—	Apache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats	Nov 8, 2023 2y ago
CVE-2023-39219	high	7.5/10	Admin Console Denial of Service via Java class enumeration	Oct 25, 2023 2y ago
CVE-2023-46120	medium	4.9/10	RabbitMQ Java client's lack of message size limitation leads to remote DoS attack	Oct 24, 2023 2y ago
CVE-2023-46126	low	3.9/10	Fides JavaScript Injection Vulnerability in Privacy Center URL	Oct 24, 2023 2y ago
CVE-2023-5072	high	7.5/10	DoS Vulnerability in JSON-Java	Oct 12, 2023 2y ago
CVE-2023-32724	critical	9.1/10	JavaScript engine memory pointers are directly available for Zabbix users for modification	Oct 12, 2023 2y ago
CVE-2023-42477	medium	6.5/10	Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)	Oct 10, 2023 2y ago
CVE-2023-39410	—	—	Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK	Sep 29, 2023 2y ago
CVE-2023-5257	low	3.5/10	WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal	Sep 29, 2023 2y ago
CVE-2023-30959	medium	4.1/10	Stored XSS via javascript URI in Apollo Change Requests comment	Sep 26, 2023 2y ago
CVE-2023-43642	high	7.5/10	Missing upper bound check on chunk length in snappy-java	Sep 25, 2023 2y ago
CVE-2023-5016	medium	6.3/10	spider-flow API DataSourceController.java DriverManager.getConnection deserialization	Sep 17, 2023 2y ago
CVE-2023-4748	medium	6.3/10	Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal	Sep 5, 2023 2y ago
CVE-2023-40580	high	8.1/10	Freighter mnemonic phrase may be accessed by Javascript through a private API	Aug 25, 2023 3y ago
CVE-2023-40030	medium	6.1/10	Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports	Aug 24, 2023 3y ago