Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,749

All time

Critical · Active

12,050

CVSS ≥ 9.0

New · 14 days

2,437

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 961–990 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2020-36634	low	2.6/10	Indeed Engineering util ViewExportedVariablesServlet.java appendTo cross site scripting	Dec 27, 2022 3y ago
CVE-2020-36628	medium	5.5/10	Calsign APDE ZIP File CopyBuildTask.java handleExtract path traversal	Dec 25, 2022 3y ago
CVE-2022-4727	low	3.5/10	OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting	Dec 24, 2022 3y ago
CVE-2022-4725	medium	5.5/10	AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgery	Dec 24, 2022 3y ago
CVE-2022-4641	low	2.5/10	pig-vector LogisticRegression.java LogisticRegression temp file	Dec 21, 2022 3y ago
CVE-2022-4594	medium	6.3/10	drogatkin TJWS2 WarRoller.java deployWar path traversal	Dec 18, 2022 3y ago
CVE-2022-4583	medium	6.3/10	jLEMS JUtil.java unpackJar path traversal	Dec 17, 2022 3y ago
CVE-2022-4565	medium	4.3/10	Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumption	Dec 16, 2022 3y ago
CVE-2022-4560	low	3.5/10	Joget wflow-core UniversalTheme.java getInternalJsCssLib cross site scripting	Dec 16, 2022 3y ago
CVE-2022-32531	—	—	Apache BookKeeper: Java Client Uses Connection to Host that Failed Hostname Verification	Dec 15, 2022 3y ago
CVE-2022-4494	medium	6.3/10	bspkrs MCPMappingViewer ZIP File RemoteZipHandler.java extractZip path traversal	Dec 14, 2022 3y ago
CVE-2022-4493	medium	6.3/10	scifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversal	Dec 14, 2022 3y ago
CVE-2022-4454	medium	5.5/10	m0ver bible-online Search search.java query sql injection	Dec 13, 2022 3y ago
CVE-2022-4347	low	3.5/10	xiandafu beetl-bbs WebUtils.java cross site scripting	Dec 8, 2022 3y ago
CVE-2022-4322	medium	6.3/10	maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection	Dec 7, 2022 3y ago
CVE-2022-4065	medium	5.5/10	cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal	Nov 19, 2022 3y ago
CVE-2022-45047	—	—	Apache MINA SSHD: Java unsafe deserialization vulnerability	Nov 16, 2022 3y ago
CVE-2022-3969	low	2.6/10	OpenKM FileUtils.java getFileExtension temp file	Nov 13, 2022 3y ago
CVE-2022-3952	low	2.6/10	ManyDesigns Portofino WarFileLauncher.java createTempDir temp file	Nov 11, 2022 3y ago
CVE-2022-31777	—	—	Apache Spark XSS vulnerability in log viewer UI Javascript	Nov 1, 2022 3y ago
CVE-2022-39016	high	8.2/10	Javascript injection in PDFtron in M-Files Hubshare	Oct 31, 2022 3y ago
CVE-2022-3171	medium	4.3/10	Memory handling vulnerability in ProtocolBuffers Java core and lite	Oct 12, 2022 3y ago
CVE-2022-39250	high	8.6/10	Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification	Sep 29, 2022 3y ago
CVE-2022-39251	high	8.6/10	Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion	Sep 28, 2022 3y ago
CVE-2022-39249	high	7.5/10	Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions	Sep 28, 2022 3y ago
CVE-2022-39236	medium	4.3/10	Matrix Javascript SDK improper beacon events can cause availability issues	Sep 28, 2022 3y ago
CVE-2022-33681	—	—	Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM	Sep 23, 2022 3y ago
CVE-2022-29063	—	—	Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz	Sep 2, 2022 3y ago
CVE-2022-37023	—	—	Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11	Aug 31, 2022 3y ago
CVE-2022-37022	—	—	Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11	Aug 31, 2022 3y ago