Lucene search
+L

11 matches found

OSV
OSV
•added 2026/05/29 8:44 a.m.•37 views

BIT-JOOMLA-2026-48902 Joomla! Core - [20260518] - Transport encryption downgrade for password and username reset links

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...

9.8CVSS5.8AI score0.00325EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/05/28 2:15 p.m.•20 views

CVE-2026-48902

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...

9.8CVSS5.8AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/26 5:16 p.m.•14 views

CVE-2026-48902

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...

9.8CVSS5.9AI score
SaveExploits0References1
NVD
NVD
•added 2026/05/26 5:16 p.m.•27 views

CVE-2026-48902

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...

9.8CVSS0.00325EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/26 4:43 p.m.•21 views

EUVD-2026-31878

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...

5.8AI score0.00325EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/26 4:43 p.m.•69 views

CVE-2026-48902 Joomla! Core - [20260518] - Transport encryption downgrade for password and username reset links

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...

0.00325EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/26 4:43 p.m.•15 views

CVE-2026-48902 Joomla! Core - [20260518] - Transport encryption downgrade for password and username reset links

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...

5.8AI score0.00325EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•32 views

Joomla! CMS 安全漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a security vulnerability, which stems from the password and username reset function creating plaintext HTTP links for HTTPS connections when a mandatory SSL flag is not set...

9.8CVSS5.8AI score0.00325EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•24 views

PT-2026-43320

Name of the Vulnerable Software and Affected Versions Joomla affected versions not specified Description The password and username reset features generate plain http links even when https connections are used, provided the "Force SSL" flag is not explicitly enabled. This leads to a transport...

9.8CVSS5.8AI score0.00325EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2016-9902

Malware in sbrugna...

9.8CVSS9.3AI score0.02064EPSS
SaveExploits0References3
CNVD
CNVD
•added 2016/12/16 12:00 a.m.•68 views

Core Remote Elevation of Privilege Vulnerability

Joomla! is a PHP-based open source content management system CMS. Can be used to build commercial Web sites , personal blogs , information management systems , Web services , etc. , but also for secondary development to expand the scope of use . A remote elevation of privilege vulnerability exist...

7.5CVSS7AI score0.14099EPSS
SaveExploits6References1
Rows per page
Query Builder