Skip to contentTypo3 vulnerabilities
Newest
- typo3, typo3 cms +1 moreObservable Response Discrepancy in TYPO3 CMSCVE-2020-11063Fix available3.7 Low
- typo3 svg sanitizerCross-Site Scripting in SVG SanitizerCVE-2020-11070Fix available5.4 Medium
- typo3Typo3 Cross-Site Scripting in Flash component (ELTS)CVE-2020-8091Fix available4.8 Medium
- typo3TYPO3 Insecure Deserialization in Query Generator & Query ViewCVE-2019-19849Fix available8.8 High
- typo3TYPO3 SQL Injection in low-level Query GeneratorCVE-2019-19850Fix available5.5 Medium
- typo3TYPO3 Directory Traversal on ZIP extractionCVE-2019-19848Fix available6.8 Medium
- typo3, typo3 core core +1 moreTypo3 SQL injection due to faulty prepared statementsCVE-2011-35839.8 Critical
- typo3Typo3 Cross-Site Scripting in Link HandlingCVE-2019-12748Fix available6.1 Medium
- typo3TYPO3 Vulnerable to Insecure DeserializationCVE-2019-12747Fix available8.8 High
- typo3TYPO3 Image Processing susceptible to Code ExecutionCVE-2019-11832Fix available7.5 High
- typo3 pharstreamwrapperPharStreamWrapper for Typo3 unsafe deserialization vulnerabilityCVE-2019-11830Fix available9.8 Critical
- typo3 pharstreamwrapper, debian linux, drupal +2 more +4 moreDirectory Traversal in typo3/phar-stream-wrapperCVE-2019-11831Fix available9.8 Critical
- typo3Typo3 XSS VulnerabilityCVE-2018-6905Public exploitFix available4.8 Medium
- typo3TYPO3 Arbitrary Code ExecutionCVE-2017-14251Fix available8.8 High
- typo3TYPO3 Information Disclosure VulnerabilityCVE-2017-6370Public exploit5.3 Medium
- typo3Extbase for TYPO3 allows RCECVE-2016-5091Fix available8.1 High
- typo3TYPO3 Backend component Cross-site scripting (XSS) vulnerabilityCVE-2016-4056Fix available6.1 Medium
- typo3TYPO3 allows remote attackers to embed Flash videos from external domainCVE-2015-8760Fix available6.1 Medium
- typo3TYPO3 Cross-site Scripting vulnerabilityCVE-2015-8759Fix available5.4 Medium
- typo3Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6...CVE-2015-87585.4 Medium
- typo3Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16...CVE-2015-87576.1 Medium
- typo3TYPO3 CMS indexed search Cross-site Scripting vulnerabilityCVE-2015-8756Fix available5.4 Medium
- typo3Typo3 XSS VulnerabilityCVE-2015-8755Fix available5.4 Medium
- typo3TYPO3 cross-site scripting (XSS)CVE-2015-5956Fix available3.5 Low
- typo3 neosTYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and...CVE-2015-28216.5 Medium
- typo3, debian linux +1 moreThe rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39,...CVE-2015-2047Fix available2.6 Low
- typo3Typo3 Vulnerable to Cache PoisoningCVE-2014-9509Fix available7.5 High
- typo3Typo3 Open Redirect In Frontend RenderingCVE-2014-9508Fix available4.3 Medium
- typo3Typo3 Information DisclosureCVE-2014-3946Fix available4.0 Medium
- typo3TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hashCVE-2014-3945Fix available4.0 Medium
- typo3TYPO3 Improper Session InvalidationCVE-2014-3944Fix available5.8 Medium
- typo3Typo3 XSS VulnerabilitiesCVE-2014-3943Fix available3.5 Low
- typo3TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP codeCVE-2014-3942Fix available6.0 Medium
- typo3Typo3 Host Header Spoofing VulnerabilityCVE-2014-3941Fix available5.0 Medium
- typo3TYPO3 vulnerable to remote authenticated arbitrary code executionCVE-2013-4321Fix available6.5 Medium
- typo3TYPO3 Improper Access Management in the File Abstraction LayerCVE-2013-4320Fix available5.5 Medium
- typo3TYPO3 doesn't properly check file extensionsCVE-2013-4250Fix available6.5 Medium
- typo3TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase FrameworkCVE-2013-7078Fix available2.6 Low
- typo3TYPO3 Improper Access Control vulnerabilityCVE-2013-7081Fix available4.9 Medium
- typo3TYPO3 is vulnerable to Mass Assignment in the Extension table administration libraryCVE-2013-7080Fix available5.8 Medium
- typo3TYPO3 OpenID extension Open redirect vulnerabilityCVE-2013-7079Fix available5.8 Medium
- typo3TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards componentCVE-2013-7075Fix available6.5 Medium
- typo3TYPO3 vulnerable to Information Disclosure via Content Editing Wizards componentCVE-2013-7073Fix available4.0 Medium
- typo3 flowTYPO3 Flow Cross-site scripting (XSS) vulnerabilityCVE-2013-7082Fix available4.3 Medium
- typo3TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration ModuleCVE-2013-7077Fix available4.3 Medium
- typo3Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4...CVE-2013-70764.3 Medium
- typo3TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards componentCVE-2013-7074Fix available3.5 Low
- typo3Typo3 Function Menu API XSS VulnerabilityCVE-2012-6148Fix available3.5 Low
- typo3TYPO3 Open redirect vulnerability in the Access tracking mechanismCVE-2013-1843Fix available6.4 Medium
- typo3TYPO3 SQL injection vulnerability in the Extbase FrameworkCVE-2013-1842Fix available7.5 High
- Show moreLoading…