CVEs (395)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Insufficient state checks lead to a vector that allows to bypass 2FA checks. |
Insufficient state checks lead to a vector that allows to bypass 2FA checks. |
An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability. |
An improper validation of user-supplied input leads to a local file inclusion vulnerability. |
An improper access check allows unauthorized access to com_config webservice endpoints. |
Improperly validated order clauses lead to a SQL injection vulnerability in com_tags. |
Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder. |
Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users. |
Lack of output escaping leads to a XSS vector in the readmore links for com_content. |
Lack of output escaping leads to a XSS vector in the content history component. |
Lack of output escaping leads to a XSS vector in the multilingual associations component. |
Lack of output escaping leads to a XSS vector in the feed modules. |
An improper access check allows unauthorized access to webservice endpoints. |
Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism. |
Lack of output escaping for article titles leads to XSS vectors in various locations. |
Lack of output escaping leads to a XSS vector in the multilingual associations component. |
Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint. |
The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers. |
Lack of output escaping leads to a XSS vector in the pagebreak plugin. |
Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags. |