A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQLi
Joomla
Convert Forms
Convert Forms Project
NVD
GitHub
CVSS 3.1
2.7
EPSS
0.0%
Carbon Black Cloud Windows Sensor, prior to 4.0.3, may be susceptible to an Information Leak vulnerability, which s a type of issue whereby sensitive information may b exposed due to a vulnerability. Rated low severity (CVSS 2.5). No vendor patch available.
Windows
Information Disclosure
Microsoft
NVD
CVSS 3.1
2.5
EPSS
0.0%