Browse CVEs

MEDIUM 5.4 CVE-2015-8758 Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote… TYPO3 Mitigation only Fix from $1,6002016-01-08 MEDIUM 6.1 CVE-2015-8757 Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject… TYPO3 Mitigation only Fix from $1,6002016-01-08 MEDIUM 5.4 CVE-2015-8756 Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allo… TYPO3 Mitigation only Fix from $1,6002016-01-08 MEDIUM 5.4 CVE-2015-8755 Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote … TYPO3 Mitigation only Fix from $1,6002016-01-08 MEDIUM 6.5 CVE-2015-2821 TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other edit… Neos Patch available Fix from $1,6002015-04-01 HIGH 7.5 CVE-2014-9509 The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors… TYPO3 No fix yet Fix from $1,9502015-01-04 MEDIUM 5.8 CVE-2014-3944 The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypas… TYPO3 Mitigation only Fix from $1,6002014-06-03 MEDIUM 6.0 CVE-2014-3942 The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authen… TYPO3 Mitigation only Fix from $1,6002014-06-03 MEDIUM 5.0 CVE-2014-3941 TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspe… TYPO3 Mitigation only Fix from $1,6002014-06-03 MEDIUM 6.5 CVE-2013-4250 The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file exte… TYPO3 Mitigation only Fix from $1,6002014-05-20 MEDIUM 6.5 CVE-2013-4321 The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.4 allows remote authenticated editors to execute arbitrary PHP code… TYPO3 Mitigation only Fix from $1,6002014-05-20 MEDIUM 5.5 CVE-2013-4320 The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenti… TYPO3 Mitigation only Fix from $1,6002014-05-20 MEDIUM 6.5 CVE-2013-7075 The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remot… TYPO3 Mitigation only Fix from $1,6002013-12-23 MEDIUM 5.8 CVE-2013-7079 Open redirect vulnerability in the OpenID extension in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.… TYPO3 Mitigation only Fix from $1,6002013-12-23 MEDIUM 5.8 CVE-2013-7080 The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16… TYPO3 Mitigation only Fix from $1,6002013-12-23 MEDIUM 6.5 CVE-2012-6144 SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote aut… TYPO3 Mitigation only Fix from $1,6002013-07-01 MEDIUM 6.4 CVE-2013-1843 Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before … TYPO3 Mitigation only Fix from $1,6002013-03-20 HIGH 7.5 CVE-2013-1842 SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 al… TYPO3 Mitigation only Fix from $1,9502013-03-20 MEDIUM 5.0 CVE-2012-1605 The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary … TYPO3 Mitigation only Fix from $1,6002012-09-04 MEDIUM 5.0 CVE-2012-1607 The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attacker… TYPO3 Mitigation only Fix from $1,6002012-09-04 MEDIUM 5.0 CVE-2012-1608 The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to… TYPO3 Mitigation only Fix from $1,6002012-09-04 MEDIUM 6.8 CVE-2010-5099 The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 d… TYPO3 No fix yet Fix from $1,6002012-05-30 MEDIUM 6.0 CVE-2010-5103 SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated u… TYPO3 Mitigation only Fix from $1,6002012-05-21 MEDIUM 5.0 CVE-2010-5102 Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x… TYPO3 Mitigation only Fix from $1,6002012-05-21 MEDIUM 6.8 CVE-2011-4614EPSS 6% PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension in TYPO3 4.5.x before 4.5.9, … TYPO3 Patch available Fix from $1,6002012-02-18 MEDIUM 6.8 CVE-2012-1083 Cross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote attackers to… Terminal after 0.3.2 Fix from $1,6002012-02-14 MEDIUM 5.0 CVE-2012-1085 Unspecified vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via … Beuserswitch No fix yet Fix from $1,6002012-02-14 HIGH 7.5 CVE-2012-1072 SQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to execute arbitrary … Toi Category after 0.6.0 Fix from $1,9502012-02-14 HIGH 7.5 CVE-2012-1074 SQL injection vulnerability in the White Papers (mm_whtppr) extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL co… Mm Whtppr after 0.0.4 Fix from $1,9502012-02-14 HIGH 7.1 CVE-2010-3714EPSS 25% The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4… TYPO3 Patch available Fix from $1,9502010-10-25