Feed live

java CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

703

Newly disclosed

Feed last synced

13 hrs ago

Data freshness

Showing 241–270 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-3064	medium	5.3/10	HummerRisk Cloud Task Scheduler ResourceCreateService.java command injection	Feb 24, 2026 4mo ago
CVE-2026-3053	medium	6.9/10	DataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authentication	Feb 24, 2026 4mo ago
CVE-2026-3052	medium	5.3/10	DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery	Feb 24, 2026 4mo ago
CVE-2026-3051	medium	5.3/10	DataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal	Feb 24, 2026 4mo ago
CVE-2026-3028	medium	5.3/10	erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting	Feb 23, 2026 4mo ago
CVE-2026-2985	medium	5.3/10	Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery	Feb 23, 2026 4mo ago
CVE-2026-2972	medium	4.8/10	a466350665 Smart-SSO Role Edit UserController.java save cross site scripting	Feb 23, 2026 4mo ago
CVE-2026-2957	medium	5.3/10	qinming99 dst-admin File BackupController.java deleteBackup denial of service	Feb 22, 2026 4mo ago
CVE-2026-2947	medium	5.1/10	rymcu forest User Profile UserInfoController.java updateUserInfo cross site scripting	Feb 22, 2026 4mo ago
CVE-2026-2946	medium	5.1/10	rymcu forest Article Content/Comments/Portfolio XssUtils.java XssUtils.replaceHtmlCode cross site scripting	Feb 22, 2026 4mo ago
CVE-2026-2864	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm PictureController.java pictureDelete path traversal	Feb 21, 2026 4mo ago
CVE-2026-2863	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java deleteFile path traversal	Feb 21, 2026 4mo ago
CVE-2026-2860	medium	5.3/10	feng_ha_ha/megagao ssm-erp/production_ssm EmployeeController.java improper authorization	Feb 21, 2026 4mo ago
CVE-2026-2852	medium	5.3/10	yeqifu warehouse Sales Endpoint SalesController.java deleteSales access control	Feb 20, 2026 4mo ago
CVE-2026-2851	medium	5.3/10	yeqifu warehouse Inport Endpoint InportController.java deleteInport access control	Feb 20, 2026 4mo ago
CVE-2026-2850	medium	5.3/10	yeqifu warehouse Customer Endpoint CustomerController.java deleteCustomer access control	Feb 20, 2026 4mo ago
CVE-2026-2849	medium	5.3/10	yeqifu warehouse Cache Sync CacheController.java syncCache access control	Feb 20, 2026 4mo ago
CVE-2025-68846	high	7.1/10	WordPress Asynchronous Javascript plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability	Feb 20, 2026 4mo ago
CVE-2026-25940	high	8.1/10	jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property)	Feb 19, 2026 4mo ago
CVE-2026-2676	medium	5.3/10	GoogTech sms-ssm API LoginInterceptor.java preHandle improper authorization	Feb 18, 2026 4mo ago
CVE-2026-2665	medium	5.3/10	huanzi-qch base-admin JSP Parser SysFileController.java upload unrestricted upload	Feb 18, 2026 4mo ago
CVE-2026-25500	medium	5.4/10	Rack's Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href	Feb 18, 2026 4mo ago
CVE-2026-2623	medium	5.3/10	Blossom File Upload BLOSManager.java put path traversal	Feb 17, 2026 4mo ago
CVE-2026-2622	medium	5.1/10	Blossom Article Title ArticleController.java content cross site scripting	Feb 17, 2026 4mo ago
CVE-2025-27898	medium	6.3/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 4mo ago
CVE-2025-27899	medium	5.3/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 4mo ago
CVE-2025-27900	medium	6.8/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 4mo ago
CVE-2025-27901	medium	6.5/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 4mo ago
CVE-2025-27903	medium	5.9/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 4mo ago
CVE-2025-27904	medium	6.5/10	Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows	Feb 17, 2026 4mo ago