Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,773

All time

Critical · Active

12,053

CVSS ≥ 9.0

New · 14 days

2,454

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1021–1050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-30179	—	—	Apache Dubbo Pre-auth RCE via Java deserialization in the Generic filter	May 31, 2021 5y ago
CVE-2021-21430	medium	6.2/10	Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code	May 10, 2021 5y ago
CVE-2021-29200	—	—	RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI	Apr 27, 2021 5y ago
CVE-2021-21087	medium	5.4/10	ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser	Apr 15, 2021 5y ago
CVE-2021-28472	high	7.8/10	Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability	Apr 13, 2021 5y ago
CVE-2021-26295	—	—	RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI	Mar 22, 2021 5y ago
CVE-2021-27084	high	7.8/10	Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability	Mar 11, 2021 5y ago
CVE-2021-20328	medium	6.4/10	MongoDB Java driver client-side field level encryption not verifying KMS host name	Feb 25, 2021 5y ago
CVE-2020-29025	medium	5.4/10	DOM-based Javascript injection	Feb 16, 2021 5y ago
CVE-2021-21029	medium	4.8/10	Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution	Feb 11, 2021 5y ago
CVE-2021-21030	high	8.1/10	Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution	Feb 11, 2021 5y ago
CVE-2020-8570	—	—	Kubernetes Java client libraries unvalidated path traversal in Copy implementation	Jan 21, 2021 5y ago
CVE-2020-12517	high	8.8/10	Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).	Dec 17, 2020 5y ago
CVE-2020-17159	high	7.8/10	Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability	Dec 9, 2020 5y ago
CVE-2020-16971	high	7.4/10	Azure SDK for Java Security Feature Bypass Vulnerability	Dec 9, 2020 5y ago
CVE-2019-20923	medium	6.5/10	Crash while handling internal Javascript exception types	Nov 23, 2020 5y ago
CVE-2020-27131	high	8.1/10	Cisco Security Manager Java Deserialization Vulnerabilities	Nov 17, 2020 5y ago
CVE-2020-24432	medium	6.7/10	Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents	Nov 5, 2020 5y ago
CVE-2020-11050	critical	9.0/10	Improper Validation of Certificate with Host Mismatch in Java-WebSocket	May 7, 2020 6y ago
CVE-2020-9055	low	3.9/10	Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript	Mar 30, 2020 6y ago
CVE-2019-16769	medium	4.2/10	Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)	Dec 5, 2019 6y ago
CVE-2019-12630	medium	6.5/10	Cisco Security Manager Java Deserialization Vulnerability	Oct 2, 2019 6y ago
CVE-2018-5405	—	—	The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.	Jun 3, 2019 7y ago
CVE-2019-3801	high	8.7/10	Java Projects using HTTP to fetch dependencies	Apr 25, 2019 7y ago
CVE-2018-18589	medium	6.3/10	MFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability	Oct 23, 2018 7y ago
CVE-2016-9498	—	—	ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects	Jul 13, 2018 8y ago
CVE-2018-6497	high	7.5/10	MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF	Jun 15, 2018 8y ago
CVE-2018-6496	high	7.5/10	MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF	Jun 15, 2018 8y ago
CVE-2017-3207	—	—	WebORB for Java by Midnight Coders, version 5.1.1.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization	Jun 11, 2018 8y ago
CVE-2017-3203	—	—	Pivotal/Spring Spring-flex's Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization	Jun 11, 2018 8y ago