Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,715

All time

Critical · Active

12,045

CVSS ≥ 9.0

New · 14 days

2,415

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 901–930 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-34040	medium	5.3/10	Java Deserialization vulnerability in Spring-Kafka When Improperly Configured	Aug 24, 2023 3y ago
CVE-2023-38687	medium	5.4/10	Execution of arbitrary JavaScript from Svelecte item names	Aug 14, 2023 3y ago
CVE-2023-36480	critical	9.8/10	Aerospike Java Client vulnerable to unsafe deserialization of server responses	Aug 4, 2023 3y ago
CVE-2022-40609	high	8.1/10	IBM SDK, Java Technology Edition code execution	Aug 2, 2023 3y ago
CVE-2023-29458	medium	5.9/10	Duktape 2.6 bug crashes JavaScript putting too many values in valstack.	Jul 13, 2023 3y ago
CVE-2023-31405	medium	5.3/10	Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)	Jul 11, 2023 3y ago
CVE-2023-34455	high	7.5/10	snappy-java's unchecked chunk length leads to DoS	Jun 15, 2023 3y ago
CVE-2023-34454	medium	5.9/10	snappy-java's Integer Overflow vulnerability in compress leads to DoS	Jun 15, 2023 3y ago
CVE-2023-34453	medium	5.9/10	snappy-java's Integer Overflow vulnerability in shuffle leads to DoS	Jun 15, 2023 3y ago
CVE-2023-3276	medium	5.5/10	Dromara HuTool XML Parsing Module XmlUtil.java readBySax xml external entity reference	Jun 15, 2023 3y ago
CVE-2023-34112	medium	4.3/10	JavaCPP project actions vulnerable to code injection	Jun 8, 2023 3y ago
CVE-2023-24540	—	—	Improper handling of JavaScript whitespace in html/template	May 11, 2023 3y ago
CVE-2023-30744	high	8.2/10	Improper access control during application start-up in SAP AS NetWeaver JAVA.	May 9, 2023 3y ago
CVE-2023-2473	medium	4.3/10	Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity	May 2, 2023 3y ago
CVE-2023-30441	high	7.5/10	IBM Java information disclosure	Apr 29, 2023 3y ago
CVE-2023-24527	medium	5.3/10	Improper Access Control in SAP NetWeaver AS Java for Deploy Service	Apr 11, 2023 3y ago
CVE-2018-25084	low	3.5/10	Ping Identity Self-Service Account Manager SSAMController.java cross site scripting	Apr 10, 2023 3y ago
CVE-2023-1741	medium	4.3/10	jeecg-boot Sleep Command SysDictMapper.java sql injection	Mar 30, 2023 3y ago
CVE-2023-28447	high	7.1/10	Cross site scripting vulnerability in Javascript escaping in smarty/smarty	Mar 28, 2023 3y ago
CVE-2022-38745	—	—	Apache OpenOffice: Empty entry in Java class path	Mar 24, 2023 3y ago
CVE-2023-1609	low	3.5/10	Zhong Bang CRMEB Java save cross site scripting	Mar 23, 2023 3y ago
CVE-2023-1608	medium	6.3/10	Zhong Bang CRMEB Java list getAdminList sql injection	Mar 23, 2023 3y ago
CVE-2023-1606	medium	6.3/10	novel-plus DictController.java sql injection	Mar 23, 2023 3y ago
CVE-2023-27268	medium	5.3/10	Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)	Mar 14, 2023 3y ago
CVE-2023-26460	medium	5.3/10	Improper Access Control in SAP NetWeaver AS Java (Cache Management Service)	Mar 14, 2023 3y ago
CVE-2023-24526	medium	5.3/10	Improper Access Control in SAP NetWeaver AS Java (Classload Service)	Mar 14, 2023 3y ago
CVE-2017-20181	medium	5.3/10	hgzojer Vocable Trainer VocableTrainerProvider.java path traversal	Mar 6, 2023 3y ago
CVE-2023-1191	medium	4.7/10	fastcms ZIP File TemplateController.java path traversal	Mar 6, 2023 3y ago
CVE-2023-1165	medium	5.5/10	Zhong Bang CRMEB Java list sql injection	Mar 3, 2023 3y ago
CVE-2023-0511	critical	9.1/10	AM Java Policy Agent path traversal	Feb 28, 2023 3y ago