Skip to main content Loading the latest cvebuzz view.
Search the full CVE archive | cvebuzz
Historical archive search
Search the full CVE archive Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.
Years with data 28
Top vendors indexed 100 Filters Refine the archive + 12 results · Sorted by Highest Buzz score first
An improper access check allows privileged users to overwrite media files without editing permissions.
CVSS 6.4 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
Network
Adjacent network
Local
Physical
Year Any year 2026 (42,963) 2025 (48,162) 2024 (39,957) 2023 (28,817) 2022 (25,074) 2021 (20,149) 2020 (18,322) 2019 (17,305) 2018 (16,510) 2017 (14,642) 2016 (6,449) 2015 (6,494) 2014 (7,928) 2013 (5,187) 2012 (5,288) 2011 (4,150) 2010 (4,639) 2009 (5,732) 2008 (5,632) 2007 (6,516) 2006 (6,608) 2005 (4,932) 2004 (2,451) 2003 (1,527) 2002 (2,156) 2001 (1,676) 2000 (1,019) 1999 (894)
CWE Enter a numeric ID such as 79 or the prefixed form CWE-79.
Only show CVEs with KEV evidence
Only show CVEs with public PoC evidence
Only show CVEs with mention evidence
Only show CVEs with AlienVault OTX activity
Sort Highest Buzz score first Newest published first Oldest published first Highest CVSS first Lowest CVSS first Most mentioned first
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
CVSS 6.4 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
Lack of validation leads to an XSS vulnerability in the MFA management views.
CVSS 5.9 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVSS 5.9 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVSS 5.9 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVSS 5.9 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
CVSS 5.9 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
Improper validation leads to a generic XSS vector in the language override feature.
CVSS 5.9 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
An improper access check allows unauthorized users to access workflow stage and transition information.
CVSS 6.4 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
An improper access check allows users to display a list of modules in the frontend.
CVSS 6.4 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
An improper access check allows unauthorized users to access com_privacy datasets.
CVSS 6.4 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
CVSS 6.4 · Medium
evidence mentions 1
Buzz score 11.9 Vendor/product tags Beta · best-effort
Showing 1-12 of 12 CVEs Page 1 of 1
About these shareable results + Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.
Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.
