Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (7 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-65886 1 Balbooa.com 1 Gridbox Extension For Joomla 2026-07-29 N/A
Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers to view arbitrary files.
CVE-2026-65888 1 Balbooa.com 1 Gridbox Extension For Joomla 2026-07-29 N/A
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any given user on the target site.
CVE-2026-66490 1 Balbooa.com 1 Gridbox Extension For Joomla 2026-07-29 6.1 Medium
Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2
CVE-2026-66488 1 Balbooa.com 1 Gridbox Extension For Joomla 2026-07-29 N/A
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
CVE-2026-65947 1 Balbooa.com 1 Gridbox Extension For Joomla 2026-07-29 N/A
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
CVE-2026-65884 1 Balbooa.com 1 Gridbox Extension For Joomla 2026-07-29 N/A
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.
CVE-2026-61425 1 Balbooa.com 1 Gridbox Extension For Joomla 2026-07-23 N/A
Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.