Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

704

Newly disclosed

Feed last synced

11 hrs ago

Data freshness

Showing 181–210 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-4218	low	2.0/10	myAEDES App aedes.me.beta EngageBayUtils.java information disclosure	Mar 16, 2026 3mo ago
CVE-2026-4217	low	2.0/10	XREAL Nebula App ai.nreal.nebula.universal CloudStoragePlugin.java credentials storage	Mar 16, 2026 3mo ago
CVE-2026-4215	medium	5.3/10	FlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery	Mar 16, 2026 3mo ago
CVE-2026-4201	medium	6.9/10	glowxq glowxq-oj SysFileController.java upload unrestricted upload	Mar 16, 2026 3mo ago
CVE-2026-4200	medium	6.9/10	glowxq glowxq-oj ProblemCaseController.java uploadTestcaseZipUrl server-side request forgery	Mar 16, 2026 3mo ago
CVE-2026-4173	medium	5.3/10	CodePhiliaX Chat2DB Database Export DMDBManage.java updateProcedure sql injection	Mar 15, 2026 3mo ago
CVE-2026-3968	medium	5.3/10	AutohomeCorp frostmourne Oracle Nashorn JavaScript ExpressionRule.java scriptEngine.eval code injection	Mar 12, 2026 3mo ago
CVE-2026-3967	medium	5.3/10	Alfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization	Mar 12, 2026 3mo ago
CVE-2026-3966	medium	5.3/10	648540858 wvp-GB28181-pro IP Address ABLMediaNodeServerService.java getDownloadFilePath server-side request forgery	Mar 12, 2026 3mo ago
CVE-2026-3963	medium	6.3/10	perfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key	Mar 11, 2026 3mo ago
CVE-2026-32117	high	7.6/10	grafanacubism-panel : Stored XSS via javascript: URL in panel zoom link (Editor → Viewer)	Mar 11, 2026 3mo ago
CVE-2026-3957	medium	5.1/10	xierongwkhd weimai-wetapp Endpoint HomeController.java getLikeMovieList sql injection	Mar 11, 2026 3mo ago
CVE-2026-3956	medium	5.1/10	xierongwkhd weimai-wetapp Admin_AdminUserController.java getAdmins sql injection	Mar 11, 2026 3mo ago
CVE-2026-32109	low	3.7/10	Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`	Mar 11, 2026 3mo ago
CVE-2026-31809	medium	6.4/10	SiYuan has a SVG Sanitizer Bypass via Whitespace in `javascript:` URI — Unauthenticated XSS	Mar 10, 2026 3mo ago
CVE-2026-30974	medium	4.6/10	Copyparty volflag `nohtml` did not block javascript in svg files	Mar 10, 2026 3mo ago
CVE-2026-3813	medium	5.3/10	opencc JFlow WF_CCForm.java Calculate injection	Mar 9, 2026 3mo ago
CVE-2026-3797	medium	5.3/10	Tiandy Video Surveillance System 视频监控平台 CLS_REST_File.java uploadFile unrestricted upload	Mar 9, 2026 3mo ago
CVE-2026-3789	medium	5.3/10	Bytedesk SpringAIGiteeRestController SpringAIGiteeRestService.java getModels server-side request forgery	Mar 8, 2026 3mo ago
CVE-2026-3788	medium	5.3/10	Bytedesk SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels server-side request forgery	Mar 8, 2026 3mo ago
CVE-2026-3750	medium	5.1/10	ContiNew Admin Storage Management S3ClientFactory.java URI.create server-side request forgery	Mar 8, 2026 3mo ago
CVE-2026-3749	medium	5.3/10	Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted upload	Mar 8, 2026 3mo ago
CVE-2026-3748	medium	5.3/10	Bytedesk SVG File UploadRestController.java uploadFile unrestricted upload	Mar 8, 2026 3mo ago
CVE-2026-3733	medium	5.3/10	xuxueli xxl-job JobInfoController.java server-side request forgery	Mar 8, 2026 3mo ago
CVE-2026-3725	medium	5.3/10	1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine	Mar 8, 2026 3mo ago
CVE-2026-3721	medium	5.1/10	1024-lab/lab1024 SmartAdmin Help Documentation HelpDocAddForm.java cross site scripting	Mar 8, 2026 3mo ago
CVE-2026-29779	high	7.5/10	UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle	Mar 7, 2026 3mo ago
CVE-2026-30238	medium	5.1/10	Group-Office: Reflected XSS in JavaScript context	Mar 6, 2026 3mo ago
CVE-2026-29183	critical	9.3/10	SiYuan: Unauthenticated reflected SVG XSS in `/api/icon/getDynamicIcon` (`type=8`) enables arbitrary JavaScript execution	Mar 6, 2026 3mo ago
CVE-2026-28393	high	8.3/10	OpenClaw 2.0.0-beta3 < 2026.2.14 - Arbitrary JavaScript Module Loading via Hook Transform Path Traversal	Mar 5, 2026 3mo ago