Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,510

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

626

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 901–930 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-39251	high	8.6/10	Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion	Sep 28, 2022 3y ago
CVE-2022-39249	high	7.5/10	Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions	Sep 28, 2022 3y ago
CVE-2022-39236	medium	4.3/10	Matrix Javascript SDK improper beacon events can cause availability issues	Sep 28, 2022 3y ago
CVE-2022-33681	—	—	Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM	Sep 23, 2022 3y ago
CVE-2022-29063	—	—	Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz	Sep 2, 2022 3y ago
CVE-2022-37023	—	—	Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11	Aug 31, 2022 3y ago
CVE-2022-37022	—	—	Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11	Aug 31, 2022 3y ago
CVE-2022-37021	—	—	Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8.	Aug 31, 2022 3y ago
CVE-2022-38189	medium	5.4/10	There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.	Aug 16, 2022 3y ago
CVE-2022-38192	medium	6.1/10	There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.	Aug 16, 2022 3y ago
CVE-2022-34169	—	—	Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets	Jul 19, 2022 3y ago
CVE-2022-31159	high	7.9/10	Partial Path Traversal in com.amazonaws:aws-java-sdk-s3	Jul 15, 2022 3y ago
CVE-2022-31781	—	—	Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)	Jul 13, 2022 3y ago
CVE-2022-23719	high	7.2/10	PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests	Jun 30, 2022 3y ago
CVE-2022-31035	critical	9.0/10	External URLs for Deployments can include javascript in argo-cd	Jun 27, 2022 4y ago
CVE-2022-1695	—	—	WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF	Jun 6, 2022 4y ago
CVE-2022-20765	medium	4.8/10	Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability	May 27, 2022 4y ago
CVE-2022-29249	high	7.5/10	Reversible One-Way Hash and Use of a Broken or Risky Cryptographic Algorithm in io.github.javaezlib.JavaEZ	May 24, 2022 4y ago
CVE-2021-22573	high	8.7/10	Incorrect signature verification on Google-oauth-java-client	May 3, 2022 4y ago
CVE-2022-1451	high	7.1/10	Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2	Apr 24, 2022 4y ago
CVE-2022-1452	high	7.1/10	Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2	Apr 24, 2022 4y ago
CVE-2022-1279	medium	6.5/10	Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads	Apr 14, 2022 4y ago
CVE-2022-20763	medium	5.4/10	Cisco Webex Meetings Java Deserialization Vulnerability	Apr 6, 2022 4y ago
CVE-2021-41766	—	—	Insecure Java Deserialization in Apache Karaf	Jan 26, 2022 4y ago
CVE-2021-22569	high	7.5/10	Denial of Service of protobuf-java parsing procedure	Jan 7, 2022 4y ago
CVE-2021-43852	high	8.8/10	JavaScript Prototype Pollution in oro/platform	Jan 4, 2022 4y ago
CVE-2021-41165	high	8.2/10	HTML comments vulnerability allowing to execute JavaScript code	Nov 17, 2021 4y ago
CVE-2021-41164	high	8.2/10	Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML	Nov 17, 2021 4y ago
CVE-2021-41174	medium	6.9/10	XSS vulnerability allowing arbitrary JavaScript execution	Nov 3, 2021 4y ago
CVE-2021-40146	—	—	A Remote Code Execution (RCE) vulnerability exists in Apache Any23 YAMLExtractor.java	Sep 11, 2021 4y ago