CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 中4.3 |
An improper access check allowed low privileged users to edit the task types of existing scheduler tasks. |
| 26/05/2026 |
| CVE-2026-48899 | 緊急9.8 | An improper access check allows privilege escalation through the com_users batch task. | 26/05/2026 |
| CVE-2026-48898 | 緊急9.8 | An improper access check allows privilege escalation through the com_users batch task. | 26/05/2026 |
| CVE-2026-48897 | 高7.5 | Insufficient state checks lead to a vector that allows to bypass 2FA checks. | 26/05/2026 |
| CVE-2026-48896 | 高7.5 | Insufficient state checks lead to a vector that allows to bypass 2FA checks. | 26/05/2026 |
| CVE-2026-40384 | 高7.5 | An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability. | 26/05/2026 |
| CVE-2026-40383 | 緊急9.8 | An improper validation of user-supplied input leads to a local file inclusion vulnerability. | 26/05/2026 |
| CVE-2026-35223 | 緊急9.8 | An improper access check allows unauthorized access to com_config webservice endpoints. | 26/05/2026 |
| CVE-2026-35222 | 緊急9.8 | Improperly validated order clauses lead to a SQL injection vulnerability in com_tags. | 26/05/2026 |
| CVE-2026-35221 | 緊急9.8 | Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder. | 26/05/2026 |
| CVE-2026-35220 | 中4.3 | Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users. | 26/05/2026 |
| CVE-2026-30895 | 中6.1 | Lack of output escaping leads to a XSS vector in the readmore links for com_content. | 26/05/2026 |
| CVE-2026-30894 | 中6.1 | Lack of output escaping leads to a XSS vector in the content history component. | 26/05/2026 |
| CVE-2026-25901 | 中6.1 | Lack of output escaping leads to a XSS vector in the multilingual associations component. | 26/05/2026 |
| CVE-2026-25900 | 中6.1 | Lack of output escaping leads to a XSS vector in the feed modules. | 26/05/2026 |
| CVE-2026-23899 | 高8.8 | An improper access check allows unauthorized access to webservice endpoints. | 01/04/2026 |