Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,749

All time

Critical · Active

12,050

CVSS ≥ 9.0

New · 14 days

2,442

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 931–960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2014-125087	medium	5.5/10	java-xmlbuilder xml external entity reference	Feb 19, 2023 3y ago
CVE-2015-10076	medium	5.5/10	dimtion Shaarlier Tag TagsSource.java createTag sql injection	Feb 9, 2023 3y ago
CVE-2023-0758	medium	6.3/10	glorylion JFinalOA SysOrg.java sql injection	Feb 9, 2023 3y ago
CVE-2022-46835	high	8.8/10	SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability	Jan 31, 2023 3y ago
CVE-2015-10068	medium	5.5/10	danynab movify-j ReviewServiceImpl.java getByMovieId sql injection	Jan 18, 2023 3y ago
CVE-2010-10006	low	2.6/10	michaelliao jopenid OpenIdManager.java getAuthentication timing discrepancy	Jan 17, 2023 3y ago
CVE-2015-10061	medium	5.5/10	evandro-machado Trabalho-Web2 ClienteDAO.java sql injection	Jan 17, 2023 3y ago
CVE-2013-10013	medium	5.5/10	Bricco Authenticator Plugin DBAuthenticator.java compare sql injection	Jan 17, 2023 3y ago
CVE-2018-25075	medium	4.6/10	karsany OBridge ProcedureDao.java getAllStandaloneProcedureAndFunction sql injection	Jan 15, 2023 3y ago
CVE-2015-10047	medium	5.5/10	KYUUBl school-register DBManager.java sql injection	Jan 15, 2023 3y ago
CVE-2015-10020	medium	5.5/10	ssn2013 cis450Project AddAppUser.java addUser sql injection	Jan 14, 2023 3y ago
CVE-2023-22491	high	8.1/10	gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection	Jan 13, 2023 3y ago
CVE-2014-125075	medium	5.5/10	gmail-servlet Model.java search sql injection	Jan 11, 2023 3y ago
CVE-2014-125074	medium	5.5/10	Nayshlok Voyager DatabaseAccess.java sql injection	Jan 11, 2023 3y ago
CVE-2023-0017	critical	9.4/10	Improper access control in SAP NetWeaver AS for Java	Jan 10, 2023 3y ago
CVE-2014-125071	medium	5.5/10	lukehutch Gribbit HttpRequestHandler.java messageReceived missing origin validation in websockets	Jan 9, 2023 3y ago
CVE-2014-125052	medium	5.5/10	JervenBolleman sparql-identifiers RegistryDao.java sql injection	Jan 6, 2023 3y ago
CVE-2018-25068	medium	6.3/10	devent globalpom-utils FileResourceManagerProvider.java createTmpDir temp file	Jan 6, 2023 3y ago
CVE-2016-15011	medium	5.5/10	e-Contract dssp SignResponseVerifier.java checkSignResponse xml external entity reference	Jan 6, 2023 3y ago
CVE-2022-4878	medium	5.5/10	JATOS ZIP ZipUtil.java ZipUtil path traversal	Jan 6, 2023 3y ago
CVE-2020-36641	medium	5.5/10	gturri aXMLRPC ResponseParser.java ResponseParser xml external entity reference	Jan 5, 2023 3y ago
CVE-2020-36640	medium	5.5/10	bonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference	Jan 5, 2023 3y ago
CVE-2014-125038	medium	5.5/10	IS_Projecto2 NewsBean.java sql injection	Jan 2, 2023 3y ago
CVE-2022-4859	low	3.5/10	Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting	Dec 30, 2022 3y ago
CVE-2017-20151	medium	5.5/10	iText RUPS XfaFile.java xml external entity reference	Dec 30, 2022 3y ago
CVE-2022-4818	medium	5.5/10	Talend Open Studio for MDM SystemStorageWrapper.java xml external entity reference	Dec 28, 2022 3y ago
CVE-2022-4773	low	2.5/10	cloudsync LocalFilesystemConnector.java getItem path traversal	Dec 27, 2022 3y ago
CVE-2020-36636	low	3.5/10	OpenMRS Admin UI Module Account Setup AccountPageController.java sendErrorMessage cross site scripting	Dec 27, 2022 3y ago
CVE-2020-36635	low	3.5/10	OpenMRS Appointment Scheduling Module AppointmentTypeValidator.java validateFieldName cross site scripting	Dec 27, 2022 3y ago
CVE-2022-4772	medium	4.5/10	Widoco WidocoUtils.java unZipIt path traversal	Dec 27, 2022 3y ago