Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,695All CVEsplus 19,114 rejected
- 415Last 24 hours2,839 in the last 7 days
- 17,134Last 30 days1,578 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 9 | 7 | 0 | 0 | 17 | 17 |
| Title | ||
|---|---|---|
| CVE-2026-82190 | Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · J2Store extension for Joomla | Medium6.3 |
| CVE-2026-78081 | Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · J2Store extension for Joomla | High7.1 |
| CVE-2026-81568 | Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · J2Store extension for Joomla | High8.7 |
| CVE-2026-82191 | Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · J2Store extension for Joomla | Medium5.3 |
| CVE-2026-81567 | Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · J2Store extension for Joomla | High8.7 |
| CVE-2026-82189 | Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · J2Store extension for Joomla | High8.7 |
| CVE-2026-78000 | Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5j2commerce.com · J2Store extension for Joomla | Medium5.3 |
| CVE-2026-78069 | Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com · J2Store extension for Joomla | Critical9.5 |
| CVE-2026-78065 | Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com · J2Store extension for Joomla | High7.1 |
| CVE-2026-77999 | Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com · J2Store extension for Joomla | High8.7 |
| CVE-2026-78064 | Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com · J2Store extension for Joomla | High8.8 |
| CVE-2026-67361 | Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5j2commerce.com · J2Store extension for Joomla | Medium6.9 |
| CVE-2026-74252 | Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5j2commerce.com · J2Store extension for Joomla | High8.6 |
| CVE-2026-67358 | Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5j2commerce.com · J2Store extension for Joomla | Medium5.3 |
| CVE-2026-67362 | Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5j2commerce.com · J2Store extension for Joomla | Medium5.1 |
| CVE-2026-67359 | Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5j2commerce.com · J2Store extension for Joomla | High8.7 |
| CVE-2026-67360 | Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5j2commerce.com · J2Store extension for Joomla | Medium6.3 |