Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,509

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

694

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 871–900 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-4859	low	3.5/10	Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting	Dec 30, 2022 3y ago
CVE-2017-20151	medium	5.5/10	iText RUPS XfaFile.java xml external entity reference	Dec 30, 2022 3y ago
CVE-2022-4818	medium	5.5/10	Talend Open Studio for MDM SystemStorageWrapper.java xml external entity reference	Dec 28, 2022 3y ago
CVE-2022-4773	low	2.5/10	cloudsync LocalFilesystemConnector.java getItem path traversal	Dec 27, 2022 3y ago
CVE-2020-36636	low	3.5/10	OpenMRS Admin UI Module Account Setup AccountPageController.java sendErrorMessage cross site scripting	Dec 27, 2022 3y ago
CVE-2020-36635	low	3.5/10	OpenMRS Appointment Scheduling Module AppointmentTypeValidator.java validateFieldName cross site scripting	Dec 27, 2022 3y ago
CVE-2022-4772	medium	4.5/10	Widoco WidocoUtils.java unZipIt path traversal	Dec 27, 2022 3y ago
CVE-2020-36634	low	2.6/10	Indeed Engineering util ViewExportedVariablesServlet.java appendTo cross site scripting	Dec 27, 2022 3y ago
CVE-2020-36628	medium	5.5/10	Calsign APDE ZIP File CopyBuildTask.java handleExtract path traversal	Dec 25, 2022 3y ago
CVE-2022-4727	low	3.5/10	OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting	Dec 24, 2022 3y ago
CVE-2022-4725	medium	5.5/10	AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgery	Dec 24, 2022 3y ago
CVE-2022-4641	low	2.5/10	pig-vector LogisticRegression.java LogisticRegression temp file	Dec 21, 2022 3y ago
CVE-2022-4594	medium	6.3/10	drogatkin TJWS2 WarRoller.java deployWar path traversal	Dec 18, 2022 3y ago
CVE-2022-4583	medium	6.3/10	jLEMS JUtil.java unpackJar path traversal	Dec 17, 2022 3y ago
CVE-2022-4565	medium	4.3/10	Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumption	Dec 16, 2022 3y ago
CVE-2022-4560	low	3.5/10	Joget wflow-core UniversalTheme.java getInternalJsCssLib cross site scripting	Dec 16, 2022 3y ago
CVE-2022-32531	—	—	Apache BookKeeper: Java Client Uses Connection to Host that Failed Hostname Verification	Dec 15, 2022 3y ago
CVE-2022-4494	medium	6.3/10	bspkrs MCPMappingViewer ZIP File RemoteZipHandler.java extractZip path traversal	Dec 14, 2022 3y ago
CVE-2022-4493	medium	6.3/10	scifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversal	Dec 14, 2022 3y ago
CVE-2022-4454	medium	5.5/10	m0ver bible-online Search search.java query sql injection	Dec 13, 2022 3y ago
CVE-2022-4347	low	3.5/10	xiandafu beetl-bbs WebUtils.java cross site scripting	Dec 8, 2022 3y ago
CVE-2022-4322	medium	6.3/10	maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection	Dec 7, 2022 3y ago
CVE-2022-4065	medium	5.5/10	cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal	Nov 19, 2022 3y ago
CVE-2022-45047	—	—	Apache MINA SSHD: Java unsafe deserialization vulnerability	Nov 16, 2022 3y ago
CVE-2022-3969	low	2.6/10	OpenKM FileUtils.java getFileExtension temp file	Nov 13, 2022 3y ago
CVE-2022-3952	low	2.6/10	ManyDesigns Portofino WarFileLauncher.java createTempDir temp file	Nov 11, 2022 3y ago
CVE-2022-31777	—	—	Apache Spark XSS vulnerability in log viewer UI Javascript	Nov 1, 2022 3y ago
CVE-2022-39016	high	8.2/10	Javascript injection in PDFtron in M-Files Hubshare	Oct 31, 2022 3y ago
CVE-2022-3171	medium	4.3/10	Memory handling vulnerability in ProtocolBuffers Java core and lite	Oct 12, 2022 3y ago
CVE-2022-39250	high	8.6/10	Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification	Sep 29, 2022 3y ago