Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

2 result(s)

Export this search: RSS · CSV · STIX

CVE-2023-23752 Medium · 5.3 KEV Urgent · 76 Public exploit CWE-284 Feb 16, 2023

Joomla! Improper Access Control Vulnerability

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

CVE-2016-10033 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-88 Dec 30, 2016

PHPMailer Command Injection Vulnerability

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.