Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

704

Newly disclosed

Feed last synced

12 hrs ago

Data freshness

Showing 211–240 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-3404	low	2.3/10	thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference	Mar 2, 2026 3mo ago
CVE-2026-3293	medium	4.8/10	snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos	Feb 27, 2026 4mo ago
CVE-2026-3289	medium	5.3/10	Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal	Feb 27, 2026 4mo ago
CVE-2026-3287	medium	5.3/10	youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection	Feb 27, 2026 4mo ago
CVE-2026-3286	medium	5.3/10	itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery	Feb 27, 2026 4mo ago
CVE-2026-3270	medium	5.3/10	psi-probe PSI Probe Whois Whois.java lookup server-side request forgery	Feb 26, 2026 4mo ago
CVE-2026-3269	medium	5.3/10	psi-probe PSI Probe Session ExpireSessionsController.java handleRequestInternal denial of service	Feb 26, 2026 4mo ago
CVE-2026-3268	medium	5.3/10	psi-probe PSI Probe Session Attribute RemoveSessAttributeController.java access control	Feb 26, 2026 4mo ago
CVE-2026-27495	critical	9.4/10	n8n has a Sandbox Escape in its JavaScript Task Runner	Feb 25, 2026 4mo ago
CVE-2026-27727	high	8.9/10	mchange-commons-java: Remote Code Execution via JNDI Reference Resolution	Feb 25, 2026 4mo ago
CVE-2026-27701	high	8.8/10	LiveCodes vulnerable to JavaScript Injection via untrusted PR title in i18n-update-pull workflow	Feb 25, 2026 4mo ago
CVE-2026-2804	—	—	Use-after-free in the JavaScript: WebAssembly component	Feb 24, 2026 4mo ago
CVE-2026-2802	—	—	Race condition in the JavaScript: GC component	Feb 24, 2026 4mo ago
CVE-2026-2801	—	—	Incorrect boundary conditions in the JavaScript: WebAssembly component	Feb 24, 2026 4mo ago
CVE-2026-2797	—	—	Use-after-free in the JavaScript: GC component	Feb 24, 2026 4mo ago
CVE-2026-2796	—	—	JIT miscompilation in the JavaScript: WebAssembly component	Feb 24, 2026 4mo ago
CVE-2026-2795	—	—	Use-after-free in the JavaScript: GC component	Feb 24, 2026 4mo ago
CVE-2026-2786	—	—	Use-after-free in the JavaScript Engine component	Feb 24, 2026 4mo ago
CVE-2026-2785	—	—	Invalid pointer in the JavaScript Engine component	Feb 24, 2026 4mo ago
CVE-2026-2783	—	—	Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component	Feb 24, 2026 4mo ago
CVE-2026-2767	—	—	Use-after-free in the JavaScript: WebAssembly component	Feb 24, 2026 4mo ago
CVE-2026-2766	—	—	Use-after-free in the JavaScript Engine: JIT component	Feb 24, 2026 4mo ago
CVE-2026-2765	—	—	Use-after-free in the JavaScript Engine component	Feb 24, 2026 4mo ago
CVE-2026-2764	—	—	JIT miscompilation, use-after-free in the JavaScript Engine: JIT component	Feb 24, 2026 4mo ago
CVE-2026-2763	—	—	Use-after-free in the JavaScript Engine component	Feb 24, 2026 4mo ago
CVE-2026-2762	—	—	Integer overflow in the JavaScript: Standard Library component	Feb 24, 2026 4mo ago
CVE-2026-2758	—	—	Use-after-free in the JavaScript: GC component	Feb 24, 2026 4mo ago
CVE-2026-3067	medium	5.3/10	HummerRisk Archive Extraction CommandUtils.java extractZip path traversal	Feb 24, 2026 4mo ago
CVE-2026-3066	medium	5.3/10	HummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection	Feb 24, 2026 4mo ago
CVE-2026-3065	medium	5.3/10	HummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection	Feb 24, 2026 4mo ago