Medium
CVE-2012-1605
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 312
Reset filters
High
CVE-2013-1842
TYPO3 SQL injection vulnerability in the Extbase Framework
Medium
CVE-2013-1843
TYPO3 Open redirect vulnerability in the Access tracking mechanism
Medium
CVE-2013-7075
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component
Medium
CVE-2013-7081
TYPO3 Improper Access Control vulnerability
Medium
CVE-2013-7080
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library
High
CVE-2013-4321
TYPO3 vulnerable to remote authenticated arbitrary code execution
Medium
CVE-2012-6146
Typo3 Backend History Module Vulnerable to XSS
Medium
CVE-2013-4320
TYPO3 Improper Access Management in the File Abstraction Layer
High
CVE-2013-4250
TYPO3 doesn't properly check file extensions
Medium
CVE-2014-3946
Typo3 Information Disclosure
Critical
CVE-2014-3945
TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash
Medium
CVE-2014-3944
TYPO3 Improper Session Invalidation
High
CVE-2014-9509
Typo3 Vulnerable to Cache Poisoning
Medium
CVE-2015-8759
TYPO3 Cross-site Scripting vulnerability
Medium
CVE-2015-8756
TYPO3 CMS indexed search Cross-site Scripting vulnerability
Medium
CVE-2015-8760
TYPO3 allows remote attackers to embed Flash videos from external domain
Medium
CVE-2015-8755
Typo3 XSS Vulnerability
High
CVE-2013-4701
PHP OpenID Library Denial of Service vulnerability
Medium
CVE-2013-7073
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
Medium
CVE-2014-9508
Typo3 Open Redirect In Frontend Rendering
Medium
CVE-2016-4056
TYPO3 Backend component Cross-site scripting (XSS) vulnerability
High
CVE-2016-5091
Extbase for TYPO3 allows RCE
Medium
CVE-2008-5644
TYPO3 Cross-site Scripting vulnerability in the file backend module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.