Lucene search
+L

19238 matches found

OpenVAS
OpenVAS
added 2021/01/12 12:00 a.m.33 views

Joomla! 3.9.0 - 3.9.22 Information Disclosure Vulnerability

Joomla! is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

5.3CVSS5.6AI score0.0107EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/12 12:00 a.m.18 views

Open Source Matters Joomla 跨站脚本漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! 3.9.0 - 3.9.23. The...

6.1CVSS6.2AI score0.7896EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/12 12:00 a.m.14 views

Open Source Matters Joomla Security Vulnerability

Joomla is an open source, cross-platform content management system CMS developed by the U.S. Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla 3.0.0 through 3.9.23, which stems from the program not performing data checks properly and can be exploited by...

5.3CVSS6AI score0.01166EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/01/12 12:00 a.m.9 views

PT-2021-15379 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.9.0 through 3.9.23 Description: The issue is related to a lack of escaping in the aria-label attribute of the mod breadcrumbs module, which allows XSS attacks. Recommendations: For Joomla! versions 3.9.0 through 3.9.23,...

6.1CVSS6.3AI score0.7896EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/01/12 12:00 a.m.14 views

Open Source Matters Joomla 跨站脚本漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! 3.1.0-3.9.23. The...

6.1CVSS6.2AI score0.0076EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/01/12 12:00 a.m.15 views

PT-2021-15380 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.1.0 through 3.9.23 Description: The issue is related to the lack of escaping of image-related parameters in multiple com tags views, which can lead to XSS attack vectors. Recommendations: For Joomla! versions 3.1.0 through...

6.1CVSS6AI score0.0076EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/01/12 12:00 a.m.13 views

PT-2021-15378 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.23 Description: The issue is related to the lack of ACL checks in the "orderPosition endpoint" of com modules, which can leak names of unpublished and/or inaccessible modules. Recommendations: For Joomla!...

5.3CVSS7.1AI score0.01166EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2021/01/12 12:00 a.m.33 views

Joomla! 3.0.0 - 3.9.22 SQLi Vulnerability

Joomla! is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

9.8CVSS8.9AI score0.28887EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/01/12 12:00 a.m.61 views

Joomla! 1.7.0 - 3.9.22 ACL Violation Vulnerability

Joomla! is prone to an ACL violation vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

7.5CVSS7.3AI score0.06211EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/29 12:00 a.m.38 views

Joomla! cross-site request forgery vulnerability (CNVD-2020-75071)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site request forgery vulnerability exists in Joomla! 2.5.0 - 3.9.22. The...

6.8CVSS6.9AI score0.00394EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/29 12:00 a.m.13 views

Joomla! SQL Injection Vulnerability (CNVD-2020-75070)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A SQL injection vulnerability exists in the back-end user list of Joomla! 3.0.0 -...

9.8CVSS8AI score0.28887EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/29 12:00 a.m.39 views

User Enumeration Vulnerability in Joomla!

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A user enumeration vulnerability exists in the back-end login page of Joomla!...

5.3CVSS6.8AI score0.0107EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/29 12:00 a.m.60 views

Path Traversal Vulnerability in Joomla! (CNVD-2020-75069)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A path traversal vulnerability exists in Joomla! 2.5.0 - 3.9.22. The vulnerabilit...

7.5CVSS6.9AI score0.01609EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/29 12:00 a.m.45 views

Joomla! information disclosure vulnerability (CNVD-2021-01570)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An information disclosure vulnerability exists in Joomla! 2.5.0-3.9.22. The...

7.5CVSS6.3AI score0.0133EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/29 12:00 a.m.33 views

Joomla! information disclosure vulnerability (CNVD-2020-75068)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An information disclosure vulnerability exists in Joomla! 2.5.0 - 3.9.22. The...

7.5CVSS6.3AI score0.01342EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/29 12:00 a.m.39 views

ACL Write Conflict Vulnerability in Joomla!

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An ACL write conflict vulnerability exists in Joomla! 1.7.0-3.9.22. The...

7.5CVSS6.9AI score0.06211EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/28 8:15 p.m.19 views

CVE-2020-35616

An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations...

7.5CVSS7.1AI score
SaveExploits0References1
NVD
NVD
added 2020/12/28 8:15 p.m.26 views

CVE-2020-35616

An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations...

7.5CVSS7.6AI score0.06211EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/28 8:15 p.m.28 views

CVE-2020-35610

An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of comfinder did not respect the access level of the corresponding terms...

7.5CVSS7.5AI score0.01342EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/28 8:15 p.m.30 views

CVE-2020-35611

An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current values...

7.5CVSS7.5AI score0.0133EPSS
SaveExploits0References1
Rows per page
Query Builder