Início / CVEs

Vulnerabilidades exploradas (CISA KEV)

CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.

2 resultado(s)

Exportar esta busca: RSS · CSV · STIX

CVE-2023-23752 Média · 5.3 KEV Urgente · 76 Exploit público CWE-284 16/02/2023

Joomla! Improper Access Control Vulnerability

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

CVE-2016-10033 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-88 30/12/2016

PHPMailer Command Injection Vulnerability

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.