Apache - CVE CyberSecurity Database News (Page 9)

Feb 26, 2025 WordPress API Apache

CVE-2024-12434 - SureMembers WordPress Plugin REST API Leak – How Attackers Can Steal Your Restricted Content

If you’re managing a WordPress website and use the SureMembers plugin, you need to know about a serious flaw that could expose private or

Feb 20, 2025 Windows GraphQL gRPC Java Apache

CVE-2025-27098 - Static File Path Traversal Vulnerability in GraphQL Mesh – Details, Exploit, and How to Fix

GraphQL Mesh is a powerful gateway and federation framework that gives you the flexibility to connect not just GraphQL subgraphs, but also REST APIs, gRPC

Feb 14, 2025 Exploit Java Apache

CVE-2024-56180 - Remote Code Execution via CWE-502 Deserialization Vulnerability in Apache EventMesh eventmesh-meta-raft Plugin

On June 9, 2024, the security community identified a critical vulnerability in the Apache EventMesh project, specifically in the eventmesh-meta-raft plugin module. Assigned as CVE-2024-56180,

Feb 14, 2025 Exploit Java Apache

CVE-2024-52577 - Critical Apache Ignite Deserialization Bug—How Attackers Can Run Code on Your Server

Apache Ignite is a popular in-memory computing platform, used widely for distributed database, caching, and computing workloads. Recently, a serious security flaw has been discovered:

Feb 13, 2025 API Exploit Apache

CVE-2025-26511 - Privilege Escalation in Instaclustr Cassandra-Lucene-Index Plugin—Your Data At Risk

> Summary: CVE-2025-26511 exposes a dangerous weakness found in the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin, affecting plugin versions 4.-rc1-1.. through 4.