Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values ar…Check if you run itEPSS 0.16%Oct 5, 2026
- Medium6.3Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0Check if you run itEPSS 0.27%Oct 5, 2026
- Medium5.3Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0Check if you run itEPSS 0.09%Oct 5, 2026
- Medium6.9Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4Check if you run itEPSS 0.29%Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0Check if you run itEPSS 0.10%Oct 5, 2026
- High8.7Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8Check if you run itEPSS 0.37%Oct 5, 2026
- Critical9.3Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16Check if you run itEPSS 0.32%Oct 5, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.04%Oct 2, 2026
- Critical9.3JoomlaBoat.comのYoutube GalleryにおけるSQL インジェクションの脆弱性Check if you run itEPSS 0.42%Sep 26, 2026
- Unknown[20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIsCheck if you run itEPSS 0.24%Sep 25, 2026
- Unknown[20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatchCheck if you run itEPSS 0.27%Sep 25, 2026
- Unknown[20260914] - Core - MFA Authentication Bypass through rememberme cookiesCheck if you run itEPSS 0.27%Sep 25, 2026
- Unknown[20260913] - Core - Improper ACL checks for varous webservice edit tasksCheck if you run itEPSS 0.23%Sep 25, 2026
- Unknown[20260912] - Core - XSS in module listCheck if you run itEPSS 0.27%Sep 25, 2026
- Unknown[20260910] - Core - Improper ACL checks for workflow stage changesCheck if you run itEPSS 0.16%Sep 25, 2026
- Unknown[20260909] - Core - SSRF vectors in various core extensionsCheck if you run itEPSS 0.24%Sep 25, 2026
- Unknown[20260911] - Core - XSS in link toolbar layoutCheck if you run itEPSS 0.27%Sep 25, 2026
- Unknown[20260908] - Core - XSS in HTML Mail TemplatesCheck if you run itEPSS 0.20%Sep 25, 2026
- Unknown[20260907] - Core - Improper ACL checks in outputs for tagged itemsCheck if you run itEPSS 0.20%Sep 25, 2026
- Unknown[20260906] - Core - Improper ACL checks in content history comparison viewCheck if you run itEPSS 0.19%Sep 25, 2026
- Unknown[20260905] - Core - Arbitrary directory deletion via cache purge actionCheck if you run itEPSS 0.34%Sep 25, 2026
- Unknown[20260904] - Core - XSS in the generic media output layoutsCheck if you run itEPSS 0.22%Sep 25, 2026
- Unknown[20260903] - Core - Improper ACL checks for access level webservice endpointsCheck if you run itEPSS 0.21%Sep 25, 2026
- Unknown[20260902] - Core - Unauthorized user account creation via profile.save controllerCheck if you run itEPSS 0.19%Sep 25, 2026
- Unknown[20260901] - Core - XSS in HTMLHelper::link methodCheck if you run itEPSS 0.22%Sep 25, 2026
146 records · page 1 of 6
PreviousNext