Medium
CVE-2022-21149
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
High
CVE-2022-1544
Improper neutralization of formula elements in yii-helpers
High
CVE-2022-23064
snipe-IT vulnerable to host header injection
Critical
CVE-2022-28056
Incorrect Permission Assignment for Critical Resource in ShopXO
High
CVE-2023-30839
SQL filter bypass leading to arbitrary write requests using SQL Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
High
CVE-2023-30838
Possible XSS injection through Validate::isCleanHTML method
Medium
CVE-2023-30545
Arbitrary file read via the backoffice Database Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
High
CVE-2010-1153
TYPO3 PHP remote file inclusion vulnerability
High
CVE-2010-0329
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
Medium
CVE-2009-5054
Smarty Does Not Consider Umask Values When Setting Permissions
Low
CVE-2009-4963
Commerce extension for TYPO3 vulnerable to Cross-site Scripting
High
CVE-2009-4803
Accessibility Glossary (a21glossary) SQL injection vulnerability
Medium
CVE-2009-4160
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure
Low
CVE-2009-4159
TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2009-3821
Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting
Medium
CVE-2009-3818
freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature
Medium
CVE-2009-3696
phpMyAdmin Cross-site Scripting In MySQL Table Name
Medium
CVE-2009-3635
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
Medium
CVE-2009-3636
Typo3 API Install Tool vulnerable to Cross-site Scripting
Medium
CVE-2009-3633
TYPO3 API function vulnerable to Cross-site Scripting
High
CVE-2009-3631
TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File Name
Medium
CVE-2009-3630
TYPO3 Backend vulnerable to Frame Hijacking
Low
CVE-2009-3629
TYPO3 Backend vulnerable to Cross-site Scripting
Medium
CVE-2009-3628
TYPO3 Backend Discloses Encryption Key
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.