Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Explore Sources Research Browse

Production

Loading current evidence

Loading the latest cvebuzz view.

© 2026 cvebuzz. CVE data courtesy of the National Vulnerability Database.

Subscribe via Atom About Browse CVEs Research Contact Privacy Policy Terms of Service

Search the full CVE archive | cvebuzz

Trending
Browse CVEs

Historical archive search

Search the full CVE archive

Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.

Years with data: 28
Top vendors indexed: 100

FiltersRefine the archive+

Search by CVE ID or description (supports basic regex, e.g. log4j|struts)

Quick date range

Last 7 days Last 30 days Last 90 days

Severity (select multiple)

Critical (43,370)High (124,775)Medium (163,219)Low (17,939)Unrated (2,047)

Attack vector (select multiple)

Results

CVE results

22 results · Sorted by Highest Buzz score first

CVE-2019-9922

Published Mar 29, 2019

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / je_messenger

CVE-2019-9921

Published Mar 29, 2019

Network

Adjacent network

Local

Physical

CVSS minCVSS max

Year

CWEEnter a numeric ID such as 79 or the prefixed form CWE-79.

VendorBetaChoose an indexed vendor suggestion or enter another vendor.ProductBeta

Only show CVEs with KEV evidence

Only show CVEs with public PoC evidence

Only show CVEs with mention evidence

Only show CVEs with AlienVault OTX activity

Sort

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user.

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

harmistechnology / je_messenger

CVE-2019-9920

Published Mar 29, 2019

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

harmistechnology / je_messenger

CVE-2019-9919

Published Mar 29, 2019

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receivin…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

harmistechnology / je_messenger

CVE-2019-9918

Published Mar 29, 2019

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefo…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

harmistechnology / je_messenger

CVE-2018-12254

Published Jun 12, 2018

router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to a home/requested_user/Sent%20interest/ URI.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

harmistechnology / ek_rishta

CVE-2018-7315

Published Feb 22, 2018

SQL Injection exists in the Ek Rishta 2.9 component for Joomla! via the gender, age1, age2, religion, mothertounge, caste, or country parameter.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

harmistechnology / ek_rishta

CVE-2012-5230

Published Oct 1, 2012

Unspecified vulnerability in the JE Story Submit (com_jesubmit) component before 1.9 for Joomla! has unknown impact and attack vectors.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jesubmitjoomla / joomla!

CVE-2010-5028

Published Nov 2, 2011

SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jejobjoomla / joomla!

CVE-2010-5022

Published Nov 2, 2011

SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view para…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jesubmitjoomla / joomla!

CVE-2010-4865

Published Oct 5, 2011

SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jeguestbookjoomla / joomla!

CVE-2010-4862

Published Oct 5, 2011

SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid par…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jedirectoryjoomla / joomla!

CVE-2010-4720

Published Feb 1, 2011

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vect…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jeautojoomla / joomla!

CVE-2010-4517

Published Dec 9, 2010

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

harmistechnology / com_jeautojoomla / joomla!

CVE-2010-4365

Published Dec 1, 2010

SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id pa…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jeajaxeventcalendarjoomla / joomla!

CVE-2010-2680

Published Jul 12, 2010

Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla! allows remote attackers to include and execute arbitrary lo…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

harmistechnology / com_jesectionfinderjoomla / joomla!

CVE-2010-2613

Published Jul 2, 2010

Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

harmistechnology / com_awd_songjoomla / joomla!

CVE-2010-2513

Published Jun 28, 2010

SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the v…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jeajaxeventcalendarjoomla / joomla!

CVE-2010-2129

Published Jun 1, 2010

Directory traversal vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

harmistechnology / com_jeajaxeventcalendarjoomla / joomla!

CVE-2010-2128

Published Jun 1, 2010

Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecif…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jequoteformjoomla / joomla!

CVE-2010-0796

Published Mar 2, 2010

SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jeeventcalendarjoomla / joomla!

CVE-2010-0795

Published Mar 2, 2010

SQL injection vulnerability in the JE Event Calendars (com_jeeventcalendar) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id pa…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

harmistechnology / com_jeeventcalendarjoomla / joomla!

Showing 1-22 of 22 CVEsPage 1 of 1

About these shareable results+

Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.

Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.