CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 04/02/2020 |
| CVE-2011-4937 | 高危7.5 | Joomla! 1.7.1 has core information disclosure due to inadequate error checking. | 04/02/2020 |
| CVE-2011-3629 | 高危7.5 | Joomla! core 1.7.1 allows information disclosure due to weak encryption | 04/02/2020 |
| CVE-2020-8421 | 中危6.1 | An issue was discovered in Joomla! before 3.9.15. Inadequate escaping of usernames allows XSS attacks in com_actionlogs. | 28/01/2020 |
| CVE-2020-8420 | 高危8.8 | An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of com_templates causes a CSRF vulnerability. | 28/01/2020 |
| CVE-2020-8419 | 高危8.8 | An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause CSRF vulnerabilities. | 28/01/2020 |
| CVE-2011-3595 | 中危5.4 | Multiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters. | 22/01/2020 |
| CVE-2011-4907 | 中危5.3 | Joomla! 1.5x through 1.5.12: Missing JEXEC Check | 15/01/2020 |
| CVE-2012-1563 | 高危7.5 | Joomla! before 2.5.3 allows Admin Account Creation. | 15/01/2020 |
| CVE-2012-1562 | 高危7.5 | Joomla! core before 2.5.3 allows unauthorized password change. | 15/01/2020 |
| CVE-2019-19846 | 严重9.8 | In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors. | 18/12/2019 |
| CVE-2019-19845 | 中危5.3 | In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure. | 18/12/2019 |
| CVE-2019-18674 | 中危5.3 | An issue was discovered in Joomla! before 3.9.13. A missing access check in the phputf8 mapping files could lead to a path disclosure. | 06/11/2019 |
| CVE-2019-18650 | 高危8.8 | An issue was discovered in Joomla! before 3.9.13. A missing token check in com_template causes a CSRF vulnerability. | 06/11/2019 |
| CVE-2019-16725 | 中危6.1 | In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates. | 24/09/2019 |
| CVE-2019-15028 | 中危5.3 | In Joomla! before 3.9.11, inadequate checks in com_contact could allow mail submission in disabled forms. | 14/08/2019 |
| CVE-2019-14654 | 高危8.8 | In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option. In other words, the filter attribute in subform fields allows remote code execution. This is fixed in 3.9.9. | 05/08/2019 |