Advisories via FriendsOfPHP

Listing reported advisories via FriendsOfPHP sorted by their report date.

TYPO3-EXT-SA-2022-018: Multiple vulnerabilities in extension "Master-Quiz" (fp_masterquiz)
FriendsOfPHP

fixpunkt/fp-masterquiz

>=3.0.0, <3.5.2 · <2.2.1

2022-12-13 10:21:00
TYPO3-CORE-SA-2022-017: By-passing Cross-Site Scripting Protection in HTML Sanitizer
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:21:15
TYPO3-CORE-SA-2022-017: By-passing Cross-Site Scripting Protection in HTML Sanitizer
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:21:15
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:21:07
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:21:07
TYPO3-CORE-SA-2022-015: Arbitrary Code Execution via Form Framework
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:59
TYPO3-CORE-SA-2022-015: Arbitrary Code Execution via Form Framework
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:59
TYPO3-CORE-SA-2022-014: Insufficient Session Expiration after Password Reset
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:51
TYPO3-CORE-SA-2022-014: Insufficient Session Expiration after Password Reset
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:51
TYPO3-CORE-SA-2022-013: Weak Authentication in Frontend Login
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:43
TYPO3-CORE-SA-2022-013: Weak Authentication in Frontend Login
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:43
TYPO3-CORE-SA-2022-012: Denial of Service in Page Error Handling
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33

2022-12-13 09:19:47
TYPO3-CORE-SA-2022-012: Denial of Service in Page Error Handling
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33

2022-12-13 09:19:47
TYPO3-EXT-SA-2022-015: Broken Access Control in extension "femanager" (femanager)
FriendsOfPHP

in2code/femanager

>=7.0.0, <7.0.1 · >=6.0.0, <6.3.3 · <5.5.2

2022-11-02 19:59:00
Possibility to load a template outside a configured directory when using the filesystem loader
FriendsOfPHP

twig/twig

>=2.0.0, <2.15.3 · >=1.0.0, <1.44.7 · >=3.0.0, <3.4.3

2022-09-28 10:36:08
Remote file inclusion
FriendsOfPHP

dompdf/dompdf

<2.0.1

2022-09-22 13:54:00
smarty_function_mailto - JavaScript injection in eval function
FriendsOfPHP

smarty/smarty

>=4.0.0, <4.2.1 · <3.1.47

2022-09-14 11:32:59
TYPO3-CORE-SA-2022-011: By-passing Cross-Site Scripting Protection in HTML Sanitizer
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:54
TYPO3-CORE-SA-2022-011: By-passing Cross-Site Scripting Protection in HTML Sanitizer
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:54
TYPO3-CORE-SA-2022-010: Cross-Site Scripting in <f:asset.css> view helper
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:46
TYPO3-CORE-SA-2022-010: Cross-Site Scripting in <f:asset.css> view helper
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:46
TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:38
TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:38
TYPO3-CORE-SA-2022-008: Missing check for expiration time of password reset token for backend users
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:29
TYPO3-CORE-SA-2022-008: Missing check for expiration time of password reset token for backend users
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:29
TYPO3-CORE-SA-2022-007: User Enumeration via Response Timing
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:20
TYPO3-CORE-SA-2022-007: User Enumeration via Response Timing
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.16 · >=10.0.0, <10.4.32

2022-09-13 08:07:20
TYPO3-CORE-SA-2022-006: Denial of Service in Page Error Handling
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.16

2022-09-13 08:07:10
TYPO3-CORE-SA-2022-006: Denial of Service in Page Error Handling
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.16

2022-09-13 08:07:10
ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent
FriendsOfPHP

react/http

>=0.7.0, <1.7.0

2022-08-20 11:11:00
Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack.
FriendsOfPHP

laminas/laminas-diactoros

<2.11.1

2022-07-25 19:29:00
Cross-site Scripting in Semantic MediaWiki
FriendsOfPHP

mediawiki/semantic-media-wiki

<4.0.2

2022-07-21 19:09:00
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
FriendsOfPHP

drupal/core

>=9.3.0, <9.3.19 · >=8.9.0, <8.10.0 · >=9.4.0, <9.4.3 · >=9.2.0, <9.3.0 · >=9.1.0, <9.2.0 · >=9.0.0, <9.1.0

2022-07-20 18:00:00
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012
FriendsOfPHP

drupal/core

>=9.3.0, <9.3.19 · >=8.9.0, <8.10.0 · >=7.0.0, <7.91.0 · >=9.4.0, <9.4.3 · >=9.2.0, <9.3.0 · >=9.1.0, <9.2.0 · >=9.0.0, <9.1.0

2022-07-20 18:00:00
Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013
FriendsOfPHP

drupal/core

>=8.0.0, <9.3.19 · >=9.4.0, <9.4.3

2022-07-20 10:11:42
TYPO3-EXT-SA-2022-014: SQL Injection in extension "LUX - TYPO3 Marketing Automation" (lux)
FriendsOfPHP

in2code/lux

>=18.0.0, <24.0.2 · <17.6.1

2022-07-11 10:57:51
CVE-2022-29858: Unpublished, protected files can be published via shortcode
FriendsOfPHP

silverstripe/assets

>=1.0.0, <1.10.1

2022-06-27 05:27:00
CVE-2021-41559: Quadratic blowup in Convert::xml2array()
FriendsOfPHP

silverstripe/framework

>=4.0.0, <4.10.9

2022-06-27 05:27:00
CVE-2022-25238: Stored XSS via HTML fields
FriendsOfPHP

silverstripe/framework

>=4.0.0, <4.10.9

2022-06-27 05:27:00
CVE-2022-28803: Stored XSS in link tags added via XHR
FriendsOfPHP

silverstripe/framework

>=4.0.0, <4.10.9

2022-06-27 05:27:00
CVE-2022-24444: Hybridsessions does not expire session id on logout
FriendsOfPHP

silverstripe/hybridsessions

>=2.5.0, <2.5.1 · >=1.0.0, <2.4.1

2022-06-27 05:27:00
Server-Side Request Forgery in dompdf/dompdf
FriendsOfPHP

dompdf/dompdf

<2.0.0

2022-06-23 13:55:00
TYPO3-CORE-SA-2022-005: Insufficient Session Expiration in Admin Tool
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.11 · >=10.0.0, <10.4.29

2022-06-14 07:12:52
TYPO3-CORE-SA-2022-005: Insufficient Session Expiration in Admin Tool
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.11 · >=10.0.0, <10.4.29

2022-06-14 07:12:52
TYPO3-CORE-SA-2022-004: Cross-Site Scripting in Frontend Login Mailer
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.11 · >=10.0.0, <10.4.29

2022-06-14 07:12:40
TYPO3-CORE-SA-2022-004: Cross-Site Scripting in Frontend Login Mailer
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.11 · >=10.0.0, <10.4.29

2022-06-14 07:12:40
TYPO3-CORE-SA-2022-003: Cross-Site Scripting in Form Framework
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.11 · >=10.0.0, <10.4.29

2022-06-14 07:12:29
TYPO3-CORE-SA-2022-003: Cross-Site Scripting in Form Framework
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.11 · >=10.0.0, <10.4.29

2022-06-14 07:12:29
TYPO3-CORE-SA-2022-002: Information Disclosure via Exception Handling/Logger
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.11 · >=10.0.0, <10.4.29

2022-06-14 07:12:17
TYPO3-CORE-SA-2022-002: Information Disclosure via Exception Handling/Logger
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.11 · >=10.0.0, <10.4.29

2022-06-14 07:12:17
« Previous Next »

Showing 101 to 150 of 1358 results

1 2 3 4 5 6 7 8 9 10 ... 27 28