| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-9233 | 2.1 |
Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Virus\Config\machine.xml, which makes it easier for attackers to determine a cleartext password, and subsequently choose unsafe malwa
|
03-10-2019 - 00:03 | 05-04-2018 - 17:29 | |
| CVE-2018-5983 | 7.5 |
SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request.
|
12-03-2018 - 16:19 | 17-02-2018 - 07:29 | |
| CVE-2018-5991 | 7.5 |
SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798.
|
05-03-2018 - 16:05 | 17-02-2018 - 07:29 | |
| CVE-2018-6006 | 7.5 |
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
|
05-03-2018 - 16:05 | 17-02-2018 - 07:29 | |
| CVE-2018-6368 | 7.5 |
SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action.
|
05-03-2018 - 16:04 | 17-02-2018 - 07:29 | |
| CVE-2018-6396 | 7.5 |
SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action.
|
05-03-2018 - 16:01 | 17-02-2018 - 07:29 | |
| CVE-2018-6372 | 7.5 |
SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.
|
05-03-2018 - 16:01 | 17-02-2018 - 07:29 | |
| CVE-2018-5970 | 7.5 |
SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries parameter.
|
02-03-2018 - 15:52 | 17-02-2018 - 07:29 | |
| CVE-2018-6004 | 7.5 |
SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield[phone] or sess parameter.
|
02-03-2018 - 15:30 | 17-02-2018 - 07:29 | |
| CVE-2018-6394 | 7.5 |
SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action.
|
02-03-2018 - 15:21 | 17-02-2018 - 07:29 | |
| CVE-2018-5981 | 7.5 |
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or gallery_id parameter.
|
02-03-2018 - 14:47 | 17-02-2018 - 07:29 | |
| CVE-2007-4957 | 7.5 |
Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a .. (
|
29-09-2017 - 01:29 | 18-09-2007 - 20:17 |