Advisories

Listing reported advisories sorted by their report date.

TYPO3 may allow editors to change, create, or delete metadata of files not within their file mounts
GitHub

typo3/cms

>= 6.2.0, < 6.2.14 · >= 7.0.0, < 7.3.1

2024-05-30 21:03:00
TYPO3 possible cache poisoning on the homepage when anchors are used
GitHub

typo3/cms

>= 7.0.0, < 7.0.2 · >= 6.2.0, < 6.2.9

2024-05-30 20:35:42
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting
GitHub

typo3/cms

>= 4.7.0, < 4.7.19 · >= 4.5.0, < 4.5.34 · >= 6.2.0, < 6.2.3 · >= 6.1.0, < 6.1.9

2024-05-30 20:00:39
TYPO3 Arbitrary Shell Execution in Swiftmailer library
GitHub

typo3/cms

>= 6.1.0, < 6.1.12 · >= 4.7.0, < 4.7.20 · >= 4.5.0, < 4.5.37 · >= 6.2.0, < 6.2.6

2024-05-30 18:59:36
TYPO3 Possible Insecure Deserialization in Extbase Request Handling
GitHub

typo3/cms-core

>= 9.0.0, < 9.5.12 · >= 8.0.0, < 8.7.30

2024-05-30 18:37:40
TYPO3 Cross-Site Scripting in Filelist Module
GitHub

typo3/cms-core

>= 10.0.0, < 10.2.1 · >= 9.0.0, < 9.5.12 · >= 8.0.0, < 8.7.30

2024-05-30 18:35:49
TYPO3 Cross-Site Scripting in Link Handling
GitHub

typo3/cms-core

>= 10.0.0, < 10.2.1 · >= 9.0.0, < 9.5.12 · >= 8.0.0, < 8.7.30

2024-05-30 18:32:53
TYPO3 Cross-Site Scripting in Form Framework validation handling
GitHub

typo3/cms-core

>= 10.0.0, < 10.2.1 · >= 9.0.0, < 9.5.12 · >= 8.0.0, < 8.7.30

2024-05-30 18:31:37
TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.27 · >= 9.0.0, < 9.5.8

2024-05-30 18:27:25
TYPO3 Broken Access Control in Import Module
GitHub

typo3/cms-core

>= 9.3.0, < 9.5.8

2024-05-30 18:25:26
TYPO3 Security Misconfiguration in Frontend Session Handling
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.27 · >= 9.0.0, < 9.5.8

2024-05-30 18:22:43
TYPO3 Information Disclosure in Backend User Interface
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.27 · >= 9.0.0, < 9.5.8

2024-05-30 18:20:23
TYPO3 Information Disclosure in User Authentication
GitHub

typo3/cms-core

>= 9.0.0, < 9.5.6

2024-05-30 18:15:10
TYPO3 Disclosure of Information about Installed Extensions
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.23 · >= 9.0.0, < 9.5.4

2024-05-30 18:13:02
TYPO3 Information Disclosure in Page Tree
GitHub

typo3/cms-core

>= 9.0.0, < 9.5.6

2024-05-30 16:24:20
TYPO3 Security Misconfiguration in User Session Handling
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.25 · >= 9.0.0, < 9.5.6

2024-05-30 16:17:54
TYPO3 Cross-Site Scripting in Form Framework
GitHub

typo3/cms-core

>= 8.5.0, < 8.7.23 · >= 9.0.0, < 9.5.4

2024-05-30 16:16:17
TYPO3 Cross-Site Scripting in Language Pack Handling
GitHub

typo3/cms-core

>= 9.2.0, < 9.5.4

2024-05-30 16:14:42
TYPO3 Arbitrary Code Execution via File List Module
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.23 · >= 9.0.0, < 9.5.4

2024-05-30 16:13:06
TYPO3 Broken Access Control in Localization Handling
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.23

2024-05-30 15:47:58
TYPO3 Cross-Site Scripting in Fluid ViewHelpers
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.23 · >= 9.0.0, < 9.5.4

2024-05-30 15:46:01
TYPO3 Security Misconfiguration for Backend User Accounts
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.23 · >= 9.0.0, < 9.5.4

2024-05-30 15:39:02
TYPO3 Denial of Service in Frontend Record Registration
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.21 · >= 7.0.0, < 7.6.32

2024-05-30 15:36:27
TYPO3 Denial of Service in Online Media Asset Handling
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.21 · >= 7.0.0, < 7.6.32 · >= 9.0.0, < 9.5.2

2024-05-30 15:33:18
TYPO3 Information Disclosure in Install Tool
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.21 · >= 7.0.0, < 7.6.32 · >= 9.0.0, < 9.5.2

2024-05-30 15:13:10
TYPO3 Security Misconfiguration in Install Tool Cookie
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.21 · >= 7.0.0, < 7.6.32 · >= 9.0.0, < 9.5.2

2024-05-30 15:11:43
TYPO3 Cross-Site Scripting in Frontend User Login
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.21 · >= 7.1.0, < 7.6.32 · >= 9.0.0, < 9.5.2

2024-05-30 14:59:36
TYPO3 Cross-Site Scripting in Backend Modal Component
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.21 · >= 7.1.0, < 7.6.32 · >= 9.0.0, < 9.5.2

2024-05-30 14:57:51
TYPO3 CMS Insecure Deserialization
GitHub

typo3/cms-core

>= 8.5.0, < 8.7.17 · >= 9.0.0, < 9.3.1

2024-05-30 14:52:14
TYPO3 Cross-Site Scripting in Online Media Asset Rendering
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.21 · >= 9.0.0, < 9.5.2

2024-05-30 14:48:32
TYPO3 CMS Privilege Escalation and SQL Injection
GitHub

typo3/cms-core

>= 8.5.0, < 8.7.17 · >= 9.0.0, < 9.3.2

2024-05-30 13:57:39
TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.17 · >= 7.0.0, < 7.6.30 · >= 9.0.0, < 9.3.2

2024-05-30 13:52:10
TYPO3 CMS Authentication Bypass vulnerability
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.17 · >= 7.0.0, < 7.6.30 · >= 9.0.0, < 9.3.2

2024-05-30 13:49:18
Twig Path Traversal vulnerability in the filesystem loader
GitHub

twig/twig

>= 1.0.0, < 1.12.3

2024-05-30 13:42:52
titon/framework vulnerable to Remote Code Execution via Chosen-Ciphertext Attack
GitHub

titon/framework

<= 0.1.0-alpha

2024-05-30 13:41:37
Thelia authentication bypass vulnerability
GitHub

thelia/thelia

>= 2.1.0-beta1, < 2.1.3

2024-05-30 13:26:49
Thelia BackOffice default template vulnerable to Cross-site Scripting
GitHub

thelia/backoffice-default-template

>= 2.1.0, < 2.1.2

2024-05-30 13:21:21
Thelia Cross-site Scripting vulnerability in BackOffice
GitHub

thelia/thelia

>= 2.1.0, < 2.1.2

2024-05-30 13:17:48
terminal42/contao-tablelookupwizard possible SQL injection in widget field value
GitHub

terminal42/contao-tablelookupwizard

>= 1.0.0, < 3.3.5

2024-05-30 13:12:15
symfony/validator XML Entity Expansion vulnerability
GitHub

symfony/validator

>= 2.0.0, < 2.0.17

2024-05-30 13:10:54
symfony/translation XML Entity Expansion vulnerability
GitHub

symfony/translation

>= 2.0.0, < 2.0.17

2024-05-30 13:02:44
Symfony Cross-Site Request Forgery vulnerability in the Web Profiler
GitHub

symfony/symfony

>= 2.0.0, < 2.3.19 · >= 2.5.0, < 2.5.4 · >= 2.4.0, < 2.4.9

2024-05-30 13:00:02
Twig remote code execution in templates
GitHub

twig/twig

< 1.20.0

2024-05-30 12:39:44
Symfony2 improper IP based access control
GitHub

symfony/symfony

>= 2.0.0, < 2.0.19 · >= 2.1.0, < 2.1.4

2024-05-30 12:35:52
Symfony XML Entity Expansion security vulnerability
GitHub

symfony/symfony

>= 2.0.0, < 2.0.17

2024-05-30 12:21:01
Symfony XML decoding attack vector through external entities
GitHub

symfony/symfony

>= 2.0.0, < 2.0.11

2024-05-30 12:17:21
Symfony may allow a user to switch to using another user's identity
GitHub

symfony/symfony

>= 2.0.0, < 2.0.6

2024-05-30 00:56:01
Symfony XML decoding attack vector through external entities
GitHub

symfony/serializer

>= 2.0.0, < 2.0.11

2024-05-30 00:52:21
Symfony XXE security vulnerability
GitHub

symfony/routing

>= 2.0.0, < 2.0.17

2024-05-30 00:49:55
Symfony allows direct access of ESI URLs behind a trusted proxy
GitHub

symfony/http-kernel

>= 2.0.0, < 2.3.19 · >= 2.5.0, < 2.5.4 · >= 2.4.0, < 2.4.9

2024-05-30 00:46:54
« Previous Next »

Showing 1101 to 1150 of 6106 results

1 2 ... 20 21 22 23 24 25 26 ... 122 123