13077 matches found
BIT-JOOMLA-2020-35610 [20201101] - Core - com_finder ignores access levels on autosuggest
An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of comfinder did not respect the access level of the corresponding terms...
BIT-JOOMLA-2020-15699
An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups table object can result in a broken site configuration...
BIT-JOOMLA-2020-11891
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...
BIT-JOOMLA-2020-10240
An issue was discovered in Joomla! before 3.9.16. Missing length checks in the user table can lead to the creation of users with duplicate usernames and/or email addresses...
BIT-JOOMLA-2020-10238
An issue was discovered in Joomla! before 3.9.16. Various actions in comtemplates lack the required ACL checks, leading to various potential attack vectors...
BIT-DOLIBARR-2024-55228
A cross-site scripting XSS vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...
BIT-DOLIBARR-2023-30253
Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...
BIT-DOLIBARR-2022-40871
Dolibarr ERP & CRM =15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval...
RHSA-2025:3531 Red Hat Security Advisory: expat security update
Bulletin has no description...
RHSA-2025:3510 Red Hat Security Advisory: kernel security update
Bulletin has no description...
CVE-2025-30622
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in torsteino PostMash postmash-custom allows SQL Injection.This issue affects PostMash: from n/a through = 1.0.3...
BELL-CVE-2025-21994
Bulletin has no description...
BELL-CVE-2025-21912
Bulletin has no description...
BELL-CVE-2025-21926
Bulletin has no description...
BELL-CVE-2025-21948
Bulletin has no description...
BELL-CVE-2025-21895
Bulletin has no description...
MAL-2025-3105 Malicious code in jcl-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5db8fba1d3af4871fe70fb88d7eef37a6740477ddfe683e8258afa4345d7055 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-14740 · Vlad.Olaru · Fonto
Name of the Vulnerable Software and Affected Versions: Fonto versions 1.2.2 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows for Path Traversal in the vlad.olaru...
PT-2025-14728 · Unknown · Support Helpdesk Ticket System Lite
Name of the Vulnerable Software and Affected Versions: Support Helpdesk Ticket System Lite versions through 4.5.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks...