Low
CVE-2014-3943
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 312
Reset filters
High
CVE-2014-3942
TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code
Medium
CVE-2018-6905
Typo3 XSS Vulnerability
Low
CVE-2015-5956
TYPO3 cross-site scripting (XSS)
Medium
CVE-2017-6370
TYPO3 Information Disclosure Vulnerability
Medium
CVE-2013-7341
Moodle cross-site scripting (XSS) vulnerabilities
High
CVE-2010-1153
TYPO3 PHP remote file inclusion vulnerability
Medium
CVE-2009-3635
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
Medium
CVE-2009-3636
Typo3 API Install Tool vulnerable to Cross-site Scripting
Medium
CVE-2009-3633
TYPO3 API function vulnerable to Cross-site Scripting
High
CVE-2009-3631
TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File Name
Medium
CVE-2009-3630
TYPO3 Backend vulnerable to Frame Hijacking
Low
CVE-2009-3629
TYPO3 Backend vulnerable to Cross-site Scripting
Medium
CVE-2009-3628
TYPO3 Backend Discloses Encryption Key
Medium
CVE-2009-0816
Typo3 Backend XSS Vulnerability
Medium
CVE-2009-0815
TYPO3 leaks a hash secret in an error message
High
CVE-2009-0258
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
High
CVE-2009-0256
Authentication library in TYPO3 vulnerable to session fixation
Medium
CVE-2008-2717
TYPO3 Unrestricted File Upload vulnerability
High
CVE-2005-4875
TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`
Critical
CVE-2011-3583
Typo3 SQL injection due to faulty prepared statements
Medium
CVE-2011-4904
Typo3 Improper Access Control
Medium
CVE-2011-4903
Typo3 XSS in RemoveXSS function
Critical
CVE-2011-4628
Typo3 Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.