Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,514

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

626

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 931–960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-38555	—	—	An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.java	Sep 11, 2021 4y ago
CVE-2021-34563	low	3.3/10	In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it	Aug 31, 2021 4y ago
CVE-2021-34562	medium	5.4/10	A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response	Aug 31, 2021 4y ago
CVE-2021-37695	high	7.3/10	Execution of JavaScript code using malformed HTML in ckeditor	Aug 12, 2021 4y ago
CVE-2021-37694	high	8.7/10	Code injection issue for java-spring-cloud-stream-template	Aug 11, 2021 4y ago
CVE-2021-28556	medium	6.9/10	Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution	Jun 28, 2021 5y ago
CVE-2020-9493	—	—	Java deserialization in Chainsaw	Jun 16, 2021 5y ago
CVE-2021-30179	—	—	Apache Dubbo Pre-auth RCE via Java deserialization in the Generic filter	May 31, 2021 5y ago
CVE-2021-21430	medium	6.2/10	Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code	May 10, 2021 5y ago
CVE-2021-29200	—	—	RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI	Apr 27, 2021 5y ago
CVE-2021-21087	medium	5.4/10	ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser	Apr 15, 2021 5y ago
CVE-2021-28472	high	7.8/10	Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability	Apr 13, 2021 5y ago
CVE-2021-26295	—	—	RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI	Mar 22, 2021 5y ago
CVE-2021-27084	high	7.8/10	Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability	Mar 11, 2021 5y ago
CVE-2021-20328	medium	6.4/10	MongoDB Java driver client-side field level encryption not verifying KMS host name	Feb 25, 2021 5y ago
CVE-2020-29025	medium	5.4/10	DOM-based Javascript injection	Feb 16, 2021 5y ago
CVE-2021-21029	medium	4.8/10	Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution	Feb 11, 2021 5y ago
CVE-2021-21030	high	8.1/10	Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution	Feb 11, 2021 5y ago
CVE-2020-8570	—	—	Kubernetes Java client libraries unvalidated path traversal in Copy implementation	Jan 21, 2021 5y ago
CVE-2020-12517	high	8.8/10	Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).	Dec 17, 2020 5y ago
CVE-2020-17159	high	7.8/10	Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability	Dec 9, 2020 5y ago
CVE-2020-16971	high	7.4/10	Azure SDK for Java Security Feature Bypass Vulnerability	Dec 9, 2020 5y ago
CVE-2019-20923	medium	6.5/10	Crash while handling internal Javascript exception types	Nov 23, 2020 5y ago
CVE-2020-27131	high	8.1/10	Cisco Security Manager Java Deserialization Vulnerabilities	Nov 17, 2020 5y ago
CVE-2020-24432	medium	6.7/10	Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents	Nov 5, 2020 5y ago
CVE-2020-11050	critical	9.0/10	Improper Validation of Certificate with Host Mismatch in Java-WebSocket	May 7, 2020 6y ago
CVE-2020-9055	low	3.9/10	Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript	Mar 30, 2020 6y ago
CVE-2019-16769	medium	4.2/10	Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)	Dec 5, 2019 6y ago
CVE-2019-12630	medium	6.5/10	Cisco Security Manager Java Deserialization Vulnerability	Oct 2, 2019 6y ago
CVE-2018-5405	—	—	The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.	Jun 3, 2019 7y ago