Latest Vulnerabilities with Public Exploits

Updated 29m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

362,997 CVEs tracked 54,707 with exploits 5,087 exploited in wild 1,635 CISA KEV 4,220 Nuclei templates 55,798 vendors 48,249 researchers

54,707 results Clear all

CVE-2018-7180 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

Saxum Astro 4.0.14 - SQL Injection via publicid Parameter

SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-7179 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

SquadManagement 1.0.3 - SQL Injection via id Parameter

SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-7178 9.8 CRITICAL 1 PoC Analysis EPSS 0.04

Saxum Picker 3.2.10 - SQL Injection via Publicid Parameter

SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-7177 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

Saxum Numerology 3.0.4 - SQL Injection via publicid Parameter

SQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6585 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

JTicketing 2.0.16 - SQL Injection via filter_creator or filter_events_cat Parameter

SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filter_creator or filter_events_cat parameter.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6584 9.8 CRITICAL 1 PoC Analysis EPSS 0.04

DT Register 3.2.7 - SQL Injection via Task Parameter

SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6583 9.8 CRITICAL 1 PoC Analysis EPSS 0.19

Timetable Responsive Schedule 1.5 - SQL Injection via view=event&alias= Request

SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6394 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

InviteX 3.0.5 - SQL Injection via invite_type Parameter

SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6373 9.8 CRITICAL 1 PoC Analysis EPSS 0.02

fastball 2.5 - SQL Injection via Season Parameter

SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6372 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

JB Bus 2.3 - SQL Injection via order_number Parameter

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6370 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

NeoRecruit 4.1 - SQL Injection via PATH_INFO or .html File Name

SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6368 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

JomEstate PRO < 3.7 - SQL Injection via id Parameter in task=detailed Action

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6006 9.8 CRITICAL 1 PoC Analysis EPSS 0.19

JS Autoz 1.0.9 - SQL Injection via vtype, pre, or prs Parameter

SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6005 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

realpin < 1.5.04 - SQL Injection via Pinboard Parameter

SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-6004 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

Joomla! File Download Tracker 3.0 - SQL Injection

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield[phone] or sess parameter.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-5994 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

JS Jobs 1.1.9 - SQL Injection via Zipcode or ta Parameter

SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-5993 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

aist < 2.0 - SQL Injection via id Parameter in showvacancy Request

SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-5992 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

Staff Master < 1.0 - SQL Injection via Name Parameter

SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-5991 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

Joomla! Form Maker 3.6.12 - SQL Injection

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798.

CWE-89 Feb 17, 2018 STIX 2.1

CVE-2018-5990 9.8 CRITICAL 1 PoC Analysis EPSS 0.03

AllVideos Reloaded <1.2.x - SQL Injection

SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.

CWE-89 Feb 17, 2018 STIX 2.1

Latest Vulnerabilities with Public Exploits

Investigate

Ecosystems

Reference Indexes

Recent Blog Posts

CVEForge Labs

KEV Gaps