dbcve.org
Vulnerability index

Browse CVEs

13 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Gridbox HIGH 7.3
CVE-2026-65947

Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2

Fix: 2.20.2+
Fix from $1,950 2026-07-29
Gridbox CRITICAL 9.8
CVE-2026-65887

Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to reset any u…

Fix: 2.20.2+
Fix from $2,300 2026-07-29
Gridbox CRITICAL 9.8
CVE-2026-65888

Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any given user…

Fix: 2.20.2+
Fix from $2,300 2026-07-29
Gridbox HIGH 7.5
CVE-2026-65886

Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers to view …

Fix: 2.20.2+
Fix from $1,950 2026-07-29
Gridbox MEDIUM 6.1
CVE-2026-66490

Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2

Fix: 2.20.2+
Fix from $1,600 2026-07-29
Gridbox MEDIUM 5.3
CVE-2026-66488

Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2

Fix: 2.20.2+
Fix from $1,600 2026-07-29
Gridbox MEDIUM 5.3
CVE-2026-66489

Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2

Fix: 2.20.2+
Fix from $1,600 2026-07-29
Gridbox CRITICAL 9.8
CVE-2026-65890

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL…

Fix: 2.20.2+
Fix from $2,300 2026-07-29
Gridbox HIGH 7.5
CVE-2026-65889

Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp method allows actors to recursively delet…

Fix: 2.20.2+
Fix from $1,950 2026-07-29
Gridbox CRITICAL 9.8
CVE-2026-65884

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing una…

Fix: 2.20.2+
Fix from $2,300 2026-07-29
Gridbox HIGH 8.8
CVE-2026-65885

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to uplo…

Fix: 2.20.2+
Fix from $1,950 2026-07-29
Forms CRITICAL 9.8
CVE-2026-56291 KEVEPSS 76%

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to…

Fix: 2.4.1+
Fix from $2,300 2026-07-09
Gridbox MEDIUM 6.1
CVE-2018-11690EPSS 34%

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of…

Fix: after 2.4.0
Fix from $1,600 2018-06-14