typo3-src vulnerabilities (Debian)

85 vulnerabilities.

• typo3-src Debian typo3-sec - end of life DSA-3314-1 No scoreJuly 23, 2015
• typo3-src Debian The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39,... CVE-2015-2047 Fix available 2.6 LowFebruary 21, 2015
• typo3-src Debian Typo3 Information Disclosure CVE-2014-3946 Fix available 4.0 MediumMay 31, 2014
• typo3-src Debian TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash CVE-2014-3945 Fix available 4.0 MediumMay 31, 2014
• typo3-src Debian TYPO3 Improper Session Invalidation CVE-2014-3944 Fix available 5.8 MediumMay 31, 2014
• typo3-src Debian Typo3 XSS Vulnerabilities CVE-2014-3943 Fix available 3.5 LowMay 31, 2014
• typo3-src Debian TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code CVE-2014-3942 Fix available 6.0 MediumMay 31, 2014
• typo3-src Debian Typo3 Host Header Spoofing Vulnerability CVE-2014-3941 Fix available 5.0 MediumMay 31, 2014
• typo3-src Debian TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework CVE-2013-7078 Fix available 2.6 LowJanuary 1, 2014
• typo3-src Debian TYPO3 Improper Access Control vulnerability CVE-2013-7081 Fix available 4.9 MediumDecember 23, 2013
• typo3-src Debian TYPO3 is vulnerable to Mass Assignment in the Extension table administration library CVE-2013-7080 Fix available 5.8 MediumDecember 23, 2013
• typo3-src Debian TYPO3 OpenID extension Open redirect vulnerability CVE-2013-7079 Fix available 5.8 MediumDecember 23, 2013
• typo3-src Debian TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component CVE-2013-7075 Fix available 6.5 MediumDecember 23, 2013
• typo3-src Debian TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component CVE-2013-7073 Fix available 4.0 MediumDecember 23, 2013
• typo3-src Debian Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4... CVE-2013-7076 4.3 MediumDecember 21, 2013
• typo3-src Debian TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component CVE-2013-7074 Fix available 3.5 LowDecember 21, 2013
• typo3-src Debian TYPO3 Open redirect vulnerability in the Access tracking mechanism CVE-2013-1843 Fix available 6.4 MediumMarch 15, 2013
• typo3-src Debian TYPO3 SQL injection vulnerability in the Extbase Framework CVE-2013-1842 Fix available 7.5 HighMarch 15, 2013
• typo3-src Debian Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2... CVE-2013-1464 Public exploitFix available 4.3 MediumFebruary 7, 2013
• typo3-src Debian Typo3 Backend API XSS Vulnerability CVE-2012-6147 Fix available 3.5 LowNovember 15, 2012
• typo3-src Debian Typo3 Backend History Module Vulnerable to XSS CVE-2012-6146 Fix available 4.0 MediumNovember 15, 2012
• typo3-src Debian Typo3 Backend History Module Vulnerable to XSS CVE-2012-6145 Fix available 3.5 LowNovember 15, 2012
• typo3-src Debian Typo3 Backend History Module Vulnerable to SQL Injection CVE-2012-6144 Fix available 6.5 MediumNovember 15, 2012
• typo3-src Debian Typo3 Install Tool XSS Vulnerability CVE-2012-3531 Fix available 4.3 MediumAugust 30, 2012
• typo3-src Debian Typo3 API XSS Vulnerability CVE-2012-3530 Fix available 4.3 MediumAugust 30, 2012
• typo3-src Debian Typo3 Backend Configuration XSS Vulnerability CVE-2012-3529 Fix available 3.5 LowAugust 30, 2012
• typo3-src Debian Typo3 Backend XSS Vulnerability CVE-2012-3528 Fix available 3.5 LowAugust 30, 2012
• typo3-src Debian TYPO3 allows remote authenticated backend users to unserialize arbitrary objects CVE-2012-3527 Fix available 4.6 MediumAugust 30, 2012
• typo3-src Debian Typo3 Exception Handler XSS CVE-2012-2112 Fix available 4.3 MediumApril 20, 2012
• typo3-src Debian Typo3 API XSS Vulnerabilities CVE-2012-1608 Fix available 5.0 MediumMarch 31, 2012
• typo3-src Debian TYPO3 allows remote attackers to obtain the database name via a direct request CVE-2012-1607 5.0 MediumMarch 31, 2012
• typo3-src Debian Typo3 Backend XSS Vulnerabilities CVE-2012-1606 Fix available 3.5 LowMarch 31, 2012
• typo3-src Debian Typo3 Improper Access Control CVE-2011-4904 Fix available 6.5 MediumAugust 7, 2011
• typo3-src Debian Typo3 XSS in RemoveXSS function CVE-2011-4903 Fix available 6.1 MediumAugust 7, 2011
• typo3-src Debian Typo3 Arbitrary File Delete CVE-2011-4902 Fix available 6.5 MediumAugust 7, 2011
• typo3-src Debian Typo3 Arbitrary Information Disclosure CVE-2011-4901 Fix available 6.5 MediumAugust 7, 2011
• typo3-src Debian Typo3 Information Disclosure CVE-2011-4900 Fix available 6.5 MediumAugust 7, 2011
• typo3-src Debian Typo3 XSS Vulnerabilities CVE-2011-4632 Fix available 5.4 MediumAugust 7, 2011
• typo3-src Debian Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4... CVE-2011-4631 5.4 MediumAugust 7, 2011
• typo3-src Debian Typo3 XSS Vulnerability CVE-2011-4630 Fix available 5.4 MediumAugust 7, 2011
• typo3-src Debian Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4... CVE-2011-4629 5.4 MediumAugust 7, 2011
• typo3-src Debian Typo3 Authentication Bypass CVE-2011-4628 Fix available 9.8 CriticalAugust 7, 2011
• typo3-src Debian Typo3 Information Disclosure CVE-2011-4627 Fix available 6.5 MediumAugust 7, 2011
• typo3-src Debian Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4... CVE-2011-4626 6.1 MediumAugust 7, 2011
• typo3-src Debian Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3... CVE-2010-4068 4.9 MediumOctober 19, 2010
• typo3-src Debian The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x... CVE-2010-3717 5.0 MediumOctober 19, 2010
• typo3-src Debian The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote... CVE-2010-3716 6.0 MediumOctober 19, 2010
• typo3-src Debian TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend CVE-2010-3715 Fix available 4.3 MediumOctober 19, 2010
• typo3-src Debian TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism CVE-2010-3714 Public exploitFix available EPSS 24.1% 7.1 HighOctober 19, 2010
• typo3-src Debian TYPO3 before 4.4.1 allows XSS in the frontend search box. CVE-2010-3674 6.1 MediumAugust 29, 2010
• Show olderLoading…