High
CVE-2010-0329
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Medium
CVE-2009-4160
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure
Low
CVE-2009-4159
TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2009-3635
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
High
CVE-2009-1264
Frontend User Registration extension for TYPO3 does not properly verify access rights
High
CVE-2009-0258
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
Medium
CVE-2008-3228
Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
Medium
CVE-2008-1502
Moodle vulnerable to Cross-site scripting
Medium
CVE-2007-4190
Joomla! vulnerable to CRLF injection
Medium
CVE-2006-4067
Cross-site scripting (XSS) vulnerability in CakePHP
Medium
CVE-2006-3360
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence
Critical
CVE-2006-0931
PEAR::Archive_Tar Directory Traversal vulnerability
High
CVE-2006-0868
PEAR::Auth potential authentication bypass vulnerability
High
CVE-2005-4875
TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`
Medium
CVE-2022-0984
Missing authorization in Moodle
High
ghsa-f6p5-76fp-m248
URL Rewrite vulnerability in multiple zendframework components
Medium
CVE-2022-24892
Multiple valid tokens for password reset in Shopware
High
CVE-2022-24872
Improper Access Control in Shopware
High
CVE-2022-24871
Server-Side Request Forgery (SSRF) in Shopware
High
CVE-2022-51012
Insufficient type validation in pocketmine/pocketmine-mp
High
CVE-2022-24828
Missing input validation can lead to command execution in composer
Medium
CVE-2011-4632
Typo3 XSS Vulnerabilities
Medium
CVE-2010-3673
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API
Medium
CVE-2010-3670
TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.