Approved changes feed: RSS · Atom

cpe:2.3:a:joomla:joomla\!:3.4.2:*:*:*:*:*:*:*

part: a version: 3.4.2 update: *

VendorJoomla (6fa59c4b-5b62-59b9-bce0-735b9b6b6c51)
ProductJoomla! (10fae64e-55af-54aa-88fc-fe7759e94ebb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8057 vulnerable 2026-06-08 05:10:07.105957 Details available
In Joomla! 3.4.0 through 3.6.5 (fixed in 3.7.0), multiple files caused full path disclosures on systems with enabled error reporting.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T16:27:21.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7989 vulnerable 2026-06-08 05:10:06.783821 Details available
In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate MIME type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T16:19:29.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7988 vulnerable 2026-06-08 05:10:06.781923 Details available
In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents allows overwriting the author of an article.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T16:19:29.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7987 vulnerable 2026-06-08 05:10:06.777780 Details available
In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T16:19:29.506Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7986 vulnerable 2026-06-08 05:10:06.775122 Details available
In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components.
Published: 2017-04-25T18:00:00.000Z
Updated: 2024-08-05T16:19:29.478Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7984 vulnerable 2026-06-08 05:10:06.764422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7983 vulnerable 2026-06-08 05:10:06.738776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14596 vulnerable 2026-06-08 05:08:50.206672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8769 vulnerable 2026-06-08 05:07:04.876100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8565 vulnerable 2026-06-08 05:07:04.437264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8562 vulnerable 2026-06-08 05:07:04.431761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7899 vulnerable 2026-06-08 05:07:02.301172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7859 vulnerable 2026-06-08 05:07:02.161316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7858 vulnerable 2026-06-08 05:07:02.160745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7857 vulnerable 2026-06-08 05:07:02.160062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7297 vulnerable 2026-06-08 05:07:00.355352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6939 vulnerable 2026-06-08 05:06:59.918349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.