Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,773

All time

Critical · Active

12,053

CVSS ≥ 9.0

New · 14 days

2,454

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 991–1020 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-37021	—	—	Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8.	Aug 31, 2022 3y ago
CVE-2022-38189	medium	5.4/10	There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.	Aug 16, 2022 4y ago
CVE-2022-38192	medium	6.1/10	There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.	Aug 16, 2022 4y ago
CVE-2022-34169	—	—	Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets	Jul 19, 2022 4y ago
CVE-2022-31159	high	7.9/10	Partial Path Traversal in com.amazonaws:aws-java-sdk-s3	Jul 15, 2022 4y ago
CVE-2022-31781	—	—	Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)	Jul 13, 2022 4y ago
CVE-2022-23719	high	7.2/10	PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests	Jun 30, 2022 4y ago
CVE-2022-31035	critical	9.0/10	External URLs for Deployments can include javascript in argo-cd	Jun 27, 2022 4y ago
CVE-2022-1695	—	—	WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF	Jun 6, 2022 4y ago
CVE-2022-20765	medium	4.8/10	Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability	May 27, 2022 4y ago
CVE-2022-29249	high	7.5/10	Reversible One-Way Hash and Use of a Broken or Risky Cryptographic Algorithm in io.github.javaezlib.JavaEZ	May 24, 2022 4y ago
CVE-2021-22573	high	8.7/10	Incorrect signature verification on Google-oauth-java-client	May 3, 2022 4y ago
CVE-2022-1451	high	7.1/10	Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2	Apr 24, 2022 4y ago
CVE-2022-1452	high	7.1/10	Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2	Apr 24, 2022 4y ago
CVE-2022-1279	medium	6.5/10	Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads	Apr 14, 2022 4y ago
CVE-2022-20763	medium	5.4/10	Cisco Webex Meetings Java Deserialization Vulnerability	Apr 6, 2022 4y ago
CVE-2021-41766	—	—	Insecure Java Deserialization in Apache Karaf	Jan 26, 2022 4y ago
CVE-2021-22569	high	7.5/10	Denial of Service of protobuf-java parsing procedure	Jan 7, 2022 4y ago
CVE-2021-43852	high	8.8/10	JavaScript Prototype Pollution in oro/platform	Jan 4, 2022 4y ago
CVE-2021-41165	high	8.2/10	HTML comments vulnerability allowing to execute JavaScript code	Nov 17, 2021 4y ago
CVE-2021-41164	high	8.2/10	Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML	Nov 17, 2021 4y ago
CVE-2021-41174	medium	6.9/10	XSS vulnerability allowing arbitrary JavaScript execution	Nov 3, 2021 4y ago
CVE-2021-40146	—	—	A Remote Code Execution (RCE) vulnerability exists in Apache Any23 YAMLExtractor.java	Sep 11, 2021 4y ago
CVE-2021-38555	—	—	An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.java	Sep 11, 2021 4y ago
CVE-2021-34563	low	3.3/10	In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it	Aug 31, 2021 4y ago
CVE-2021-34562	medium	5.4/10	A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response	Aug 31, 2021 4y ago
CVE-2021-37695	high	7.3/10	Execution of JavaScript code using malformed HTML in ckeditor	Aug 12, 2021 5y ago
CVE-2021-37694	high	8.7/10	Code injection issue for java-spring-cloud-stream-template	Aug 11, 2021 5y ago
CVE-2021-28556	medium	6.9/10	Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution	Jun 28, 2021 5y ago
CVE-2020-9493	—	—	Java deserialization in Chainsaw	Jun 16, 2021 5y ago