279
CVEs
33
Critical
74
High
2
KEV
41
PoC
89
Unpatched C/H
15.1%
Patch Rate
6.0%
Avg EPSS
Severity Breakdown
CRITICAL
33
HIGH
74
MEDIUM
167
LOW
4
Monthly CVE Trend
Affected Products (30)
PHP
27
Open Redirect
6
Js Jobs
3
Easydiscuss
3
Jux Real Estate
3
Hikashop
2
Phpmailer
2
Debian Linux
2
Fedora
2
Snippets Pro Extension For Joomla
1
Insurance Ifrs 17 Analyzer
1
Junos
1
Financial Services Loan Loss Forecasting And Provisioning
1
Bi Publisher
1
Insurance Performance Insight
1
Joomshopping
1
Hospitality Simphony
1
Cloudforms
1
Jquery
1
Pharstreamwrapper
1
Articles Anywhere Free Pro Extension For Joomla
1
Retail Back Office
1
Financial Services Market Risk Measurement And Management
1
Tabs Accordions Free Pro Extension For Joomla
1
Financial Services Institutional Performance Analytics
1
Communications Session Report Manager
1
Business Process Management Suite
1
Leap
1
Agile Product Lifecycle Management For Process
1
Policy Automation Connector For Siebel
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2016-10033 | The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \". Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available. | CRITICAL | 9.8 | 94.5% | 228 |
KEV
PoC
|
| CVE-2017-8917 | SQL injection vulnerability in Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 94.5%. | CRITICAL | 9.8 | 94.5% | 179 |
PoC
|
| CVE-2016-10045 | The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 93.4%. | CRITICAL | 9.8 | 93.4% | 177 |
PoC
|
| CVE-2015-8562 | Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 92.9%. | HIGH | 7.5 | 92.9% | 165 |
PoC
No patch
|
| CVE-2015-7297 | SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 91.6%. | HIGH | 7.5 | 91.6% | 164 |
PoC
No patch
|
| CVE-2016-8869 | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 91.9%. | CRITICAL | 9.8 | 91.9% | 161 |
PoC
|
| CVE-2016-8870 | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 91.5%. | HIGH | 8.1 | 91.5% | 152 |
PoC
|
| CVE-2015-7857 | SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 72.2%. | HIGH | 7.5 | 72.2% | 145 |
PoC
No patch
|
| CVE-2015-7858 | SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 69.1%. | HIGH | 7.5 | 69.1% | 142 |
PoC
No patch
|
| CVE-2013-5576 | administrator/components/com_media/helpers/media.php in the media manager in Joomla!. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 52.1%. | MEDIUM | 6.8 | 52.1% | 121 |
PoC
|
| CVE-2014-7228 | Akeeba Restore (restore.php), as used in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.5 | 6.1% | 79 |
PoC
No patch
|
| CVE-2014-7981 | SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 14.3%. | HIGH | 7.5 | 14.3% | 72 |
PoC
No patch
|
| CVE-2017-14596 | In Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 2.6% | 72 |
PoC
No patch
|
| CVE-2016-9836 | The file scanning mechanism of JFilterInput::isFileSafe() in Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.4% | 69 |
PoC
No patch
|
| CVE-2019-10945 | An issue was discovered in Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 38.0% | 69 |
PoC
No patch
|