| Max CVSS | 7.8 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-13818 | 7.5 |
Twig before 2.4.4 allows Server-Side Template Injection (SSTI) via the search search_key parameter. NOTE: the vendor points out that Twig itself is not a web application and states that it is the responsibility of web applications using Twig to prope
|
05-08-2024 - 10:15 | 10-07-2018 - 14:29 | |
| CVE-2018-6373 | 7.5 |
SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action.
|
19-10-2020 - 17:43 | 17-02-2018 - 07:29 | |
| CVE-2007-4918 | 7.5 |
SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to index.php.
|
15-10-2018 - 21:38 | 17-09-2007 - 17:17 | |
| CVE-2018-4863 | 2.1 |
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key.
|
18-05-2018 - 15:32 | 05-04-2018 - 17:29 | |
| CVE-2015-5374 | 7.8 |
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet mod
|
23-03-2018 - 01:29 | 18-07-2015 - 10:59 | |
| CVE-2018-6584 | 7.5 |
SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request.
|
05-03-2018 - 15:53 | 17-02-2018 - 07:29 | |
| CVE-2017-16356 | 4.3 |
Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/plugin_sige/print.php link with a crafted img, name, or captio
|
05-03-2018 - 15:48 | 20-02-2018 - 15:29 | |
| CVE-2018-5990 | 7.5 |
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.
|
02-03-2018 - 15:31 | 17-02-2018 - 07:29 | |
| CVE-2018-5982 | 7.5 |
SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show_rss_categories&catname= request.
|
01-03-2018 - 20:03 | 17-02-2018 - 07:29 | |
| CVE-2018-5993 | 7.5 |
SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request.
|
01-03-2018 - 20:02 | 17-02-2018 - 07:29 |