Products
CMS & websites
Joomla
- Last 30 days
- 0
- Actively exploited (KEV)
- 1
- All CVEs
- 10
Latest vulnerabilities
| ID | Severity | Description | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-27187 | 7.5High |
Joomla! Project Joomla! CMSjoomla joomla\!
[20240804] - Core - Improper ACL for backend profile view
|
0.35% |
2024-08-20
27 mo ago
|
|
CVE-2023-23752
KEV
|
5.3Medium |
Joomla! Project Joomla! CMSjoomla joomla\!
[20230201] - Core - Improper access check in webservice endpoints
|
99.8% |
2023-02-16
45 mo ago
|
| CVE-2011-1151 | Not scored |
joomla joomla\!
Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.
|
1.86% |
2020-02-06
82 mo ago
|
| CVE-2011-4912 | Not scored |
joomla joomla\!
Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.
|
0.77% |
2020-02-04
82 mo ago
|
| CVE-2011-3629 | Not scored |
joomla Joomla! core
Joomla! core 1.7.1 allows information disclosure due to weak encryption
|
1.13% |
2020-02-04
82 mo ago
|
| CVE-2011-4937 | Not scored |
joomla joomla\!
Joomla! 1.7.1 has core information disclosure due to inadequate error checking.
|
1.56% |
2020-02-04
82 mo ago
|
| CVE-2011-3595 | Not scored |
joomla joomla\!
Multiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters.
|
0.81% |
2020-01-22
82 mo ago
|
| CVE-2011-4907 | Not scored |
joomla joomla\!
Joomla! 1.5x through 1.5.12: Missing JEXEC Check
|
0.88% |
2020-01-15
83 mo ago
|
| CVE-2012-1563 | Not scored |
joomla joomla\!
Joomla! before 2.5.3 allows Admin Account Creation.
|
8.89% |
2020-01-15
83 mo ago
|
| CVE-2012-1562 | Not scored |
joomla Joomla! core
Joomla! core before 2.5.3 allows unauthorized password change.
|
0.89% |
2020-01-15
83 mo ago
|