CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 04/02/2020 |
| CVE-2011-4937 | 높음7.5 | Joomla! 1.7.1 has core information disclosure due to inadequate error checking. | 04/02/2020 |
| CVE-2011-3629 | 높음7.5 | Joomla! core 1.7.1 allows information disclosure due to weak encryption | 04/02/2020 |
| CVE-2020-8421 | 보통6.1 | An issue was discovered in Joomla! before 3.9.15. Inadequate escaping of usernames allows XSS attacks in com_actionlogs. | 28/01/2020 |
| CVE-2020-8420 | 높음8.8 | An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of com_templates causes a CSRF vulnerability. | 28/01/2020 |
| CVE-2020-8419 | 높음8.8 | An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause CSRF vulnerabilities. | 28/01/2020 |
| CVE-2011-3595 | 보통5.4 | Multiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters. | 22/01/2020 |
| CVE-2011-4907 | 보통5.3 | Joomla! 1.5x through 1.5.12: Missing JEXEC Check | 15/01/2020 |
| CVE-2012-1563 | 높음7.5 | Joomla! before 2.5.3 allows Admin Account Creation. | 15/01/2020 |
| CVE-2012-1562 | 높음7.5 | Joomla! core before 2.5.3 allows unauthorized password change. | 15/01/2020 |
| CVE-2019-19846 | 심각9.8 | In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors. | 18/12/2019 |
| CVE-2019-19845 | 보통5.3 | In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure. | 18/12/2019 |
| CVE-2019-18674 | 보통5.3 | An issue was discovered in Joomla! before 3.9.13. A missing access check in the phputf8 mapping files could lead to a path disclosure. | 06/11/2019 |
| CVE-2019-18650 | 높음8.8 | An issue was discovered in Joomla! before 3.9.13. A missing token check in com_template causes a CSRF vulnerability. | 06/11/2019 |
| CVE-2019-16725 | 보통6.1 | In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates. | 24/09/2019 |
| CVE-2019-15028 | 보통5.3 | In Joomla! before 3.9.11, inadequate checks in com_contact could allow mail submission in disabled forms. | 14/08/2019 |
| CVE-2019-14654 | 높음8.8 | In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option. In other words, the filter attribute in subform fields allows remote code execution. This is fixed in 3.9.9. | 05/08/2019 |