Alta
CVE-2010-0329
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.404
Restablecer filtros
Media
CVE-2009-4160
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure
Baja
CVE-2009-4159
TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2009-3635
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
Alta
CVE-2009-1264
Frontend User Registration extension for TYPO3 does not properly verify access rights
Alta
CVE-2009-0258
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
Media
CVE-2008-3228
Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
Media
CVE-2008-1502
Moodle vulnerable to Cross-site scripting
Media
CVE-2007-4190
Joomla! vulnerable to CRLF injection
Media
CVE-2006-4067
Cross-site scripting (XSS) vulnerability in CakePHP
Media
CVE-2006-3360
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence
Crítica
CVE-2006-0931
PEAR::Archive_Tar Directory Traversal vulnerability
Alta
CVE-2006-0868
PEAR::Auth potential authentication bypass vulnerability
Alta
CVE-2005-4875
TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`
Media
CVE-2022-0984
Missing authorization in Moodle
Alta
ghsa-f6p5-76fp-m248
URL Rewrite vulnerability in multiple zendframework components
Media
CVE-2022-24892
Multiple valid tokens for password reset in Shopware
Alta
CVE-2022-24872
Improper Access Control in Shopware
Alta
CVE-2022-24871
Server-Side Request Forgery (SSRF) in Shopware
Alta
CVE-2022-51012
Insufficient type validation in pocketmine/pocketmine-mp
Alta
CVE-2022-24828
Missing input validation can lead to command execution in composer
Media
CVE-2011-4632
Typo3 XSS Vulnerabilities
Media
CVE-2010-3673
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API
Media
CVE-2010-3670
TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.