Vulnerabilities

Summary — last 7 days

New vulnerabilities3,360▼ 1,339 vs. last week
Critical / high1,084▼ 851 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)1,075▲ 403 vs. last week
More filters
–

3 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedCritical (9.8)2.3%—Jimtawl Project Jimtawl6/19/20196/17/2026
SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter.
ModifiedCritical (9.8)36%ExploitJanguo Jimtawl2/2/20186/17/2026
Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request.
ModifiedHigh (7.5)7.6%ExploitJanguo COM Jimtawl3/23/20116/16/2026
Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the task parameter to index.php.