Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.06%Jan 28, 2009
- Critical10.0The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execu…Check if you run itEPSS 3.31%Jan 22, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitra…Check if you run itEPSS 1.56%Jan 22, 2009
- High7.5Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hija…Check if you run itEPSS 1.79%Jan 22, 2009
- High7.5The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random s…Check if you run itEPSS 9.44%Jan 22, 2009
- UnknownOpenOffice.org 1.1.2 through 1.1.5 Memory CorruptionPatch nowKEVEPSS 7.50%Jan 21, 2009
- Low2.1An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" when there is a current login to a web site, which…Check if you run itEPSS 0.87%Jan 20, 2009
- High7.1Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files on a client machine via vectors related to the a…Check if you run itEPSS 1.67%Jan 15, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authe…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium5.5Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated u…Check if you run itEPSS 1.02%Jan 14, 2009
- Medium4.0Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5 allows remote authenticated users to…Check if you run itEPSS 1.53%Jan 14, 2009
- Medium6.5Unspecified vulnerability in the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authentic…Check if you run itEPSS 1.75%Jan 14, 2009
- Critical9.3CVE-2009-0070 is listed by apple.Check if you run itEPSS 2.86%Jan 8, 2009
- Medium5.0Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (memory consumption and bro…Check if you run itEPSS 3.92%Jan 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.02%Dec 31, 2008
- High7.5SQL injection vulnerability in the CMS Poll system (cms_poll) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Dec 31, 2008
- High7.5SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Dec 31, 2008
- High7.5SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL comm…Check if you run itEPSS 1.06%Dec 31, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to inject arbitr…Check if you run itEPSS 1.03%Dec 31, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbi…Check if you run itEPSS 1.05%Dec 17, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.Check if you run itEPSS 1.09%Dec 17, 2008
- High7.5SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Dec 17, 2008
- UnknownMicrosoft Internet Explorer CRecordInstance::TransferToDestination Remote Code ExecutionPatch nowKEVEPSS 66.51%Dec 11, 2008
Sort