Joomla! Project Joomla! CMS

• CVE-2022-23798 Unrated [20220306] - Core - Inadequate validation of internal URLs 0.6%
• CVE-2022-23797 Unrated [20220305] - Core - Inadequate filtering on the selected Ids 1.1%
• CVE-2022-23796 Unrated [20220304] - Core - Missing input validation within com_fields class inputs 0.6%
• CVE-2022-23795 Unrated [20220303] - Core - User row are not bound to a authentication mechanism 1.1%
• CVE-2022-23794 Unrated [20220302] - Core - Path Disclosure within filesystem error messages 0.9%
• CVE-2022-23793 Unrated [20220301] - Core - Zip Slip within the Tar extractor 2.1%
• CVE-2021-26040 Unrated [20210801] - Core - Insufficient access control for com_media deletion endpoint 0.9%
• CVE-2021-26039 Unrated [20210705] - Core - XSS in com_media imagelist 0.7%
• CVE-2021-26038 Unrated [20210704] - Core - Privilege escalation through com_installer 1.0%
• CVE-2021-26037 Unrated [20210703] - Core - Lack of enforced session termination 0.9%
• CVE-2021-26036 Unrated [20210702] - Core - DoS through usergroup table manipulation 1.2%
• CVE-2021-26035 Unrated [20210701] - Core - XSS in JForm Rules field 0.7%
• CVE-2021-26034 Unrated [20210503] - Core - CSRF in data download endpoints 0.5%
• CVE-2021-26033 Unrated [20210502] - Core - CSRF in AJAX reordering endpoint 0.5%
• CVE-2021-26032 Unrated [20210501] - Core - Adding HTML to the executable block list of MediaHelper::canUpload 0.8%
• CVE-2021-26031 Unrated [20210402] - Core - Inadequate filters on module layout settings 1.0%
• CVE-2021-26030 Unrated [20210401] - Core - Escape xss in logo parameter error pages 82.8%
• CVE-2021-26029 Unrated [20210309] - Core - Inadequate filtering of form contents could allow to overwrite the author field 1.0%
• CVE-2021-26028 Unrated [20210308] - Core - Path Traversal within joomla/archive zip class 1.0%
• CVE-2021-26027 Unrated [20210307] - Core - ACL violation within com_content frontend editing 1.0%
• CVE-2021-23132 Unrated [20210306] - Core - com_media allowed paths that are not intended for image uploads 6.7%
• CVE-2021-23131 Unrated [20210305] - Core - Input validation within the template manager 1.4%
• CVE-2021-23130 Unrated [20210304] - Core - XSS within the feed parser library 0.8%
• CVE-2021-23129 Unrated [20210303] - Core - XSS within alert messages showed to users 0.8%
• CVE-2021-23128 Unrated [20210302] - Core - Potential Insecure FOFEncryptRandval 1.4%
• CVE-2021-23127 Unrated [20210301] - Core - Insecure randomness within 2FA secret generation 1.4%
• CVE-2021-23126 Unrated [20210301] - Core - Insecure randomness within 2FA secret generation 1.1%
• CVE-2021-23125 Unrated [20210103] - Core - XSS in com_tags image parameters 0.8%
• CVE-2021-23124 Unrated [20210102] - Core - XSS in mod_breadcrumbs aria-label attribute 79.0%
• CVE-2021-23123 Unrated [20210101] - Core - com_modules exposes module names 1.2%
• CVE-2020-35616 Unrated [20201107] - Core - Write ACL violation in multiple core views 6.3%
• CVE-2020-35615 Unrated [20201106] - Core - CSRF in com_privacy emailexport feature 0.4%
• CVE-2020-35614 Unrated [20201105] - Core - User Enumeration in backend login 1.1%
• CVE-2020-35613 Unrated [20201104] - Core - SQL injection in com_users list view 28.9%
• CVE-2020-35612 Unrated [20201103] - Core - Path traversal in mod_random_image 1.6%
• CVE-2020-35611 Unrated [20201102] - Core - Disclosure of secrets in Global Configuration page 1.3%
• CVE-2020-35610 Unrated [20201101] - Core - com_finder ignores access levels on autosuggest 1.4%