Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.21%Jul 1, 2013
- Low3.5Cross-site scripting (XSS) vulnerability in the function menu API in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated…Check if you run itEPSS 1.18%Jul 1, 2013
- Low3.5Cross-site scripting (XSS) vulnerability in the tree render API (TCA-Tree) in the Backend API in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6…Check if you run itEPSS 1.82%Jul 1, 2013
- Low3.5Cross-site scripting (XSS) vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenti…Check if you run itEPSS 1.18%Jul 1, 2013
- Medium6.5SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend…Check if you run itEPSS 2.17%Jul 1, 2013
- High7.5SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.21%Jun 27, 2013
- High7.5SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.22%Jun 27, 2013
- High7.5SQL injection vulnerability in the SEO Pack for tt_news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.22%Jun 27, 2013
- Medium6.0SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL com…Check if you run itEPSS 0.97%Jun 27, 2013
- High8.8Mozilla Firefox and Thunderbird Denial-of-Service VulnerabilityPatch nowKEVEPSS 69.02%Jun 25, 2013
- High7.5SQL injection vulnerability in the meta_feedit extension 0.1.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.21%Jun 25, 2013
- High7.5SQL injection vulnerability in the Multishop extension before 2.0.39 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.22%Jun 25, 2013
- High7.5SQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.22%Jun 25, 2013
- Medium6.4Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phi…Check if you run itEPSS 1.33%Jun 25, 2013
- High7.5SQL injection vulnerability in the jQuery autocomplete for indexed_search (rzautocomplete) extension before 0.0.9 for TYPO3 allows remote attackers to execute arbitrar…Check if you run itEPSS 1.35%Jun 20, 2013
- Critical9.8Oracle Java SE Unspecified VulnerabilityPatch nowKEVEPSS 98.77%Jun 18, 2013
- High7.8Microsoft Office Buffer Overflow VulnerabilityPatch nowKEVEPSS 79.82%Jun 11, 2013
- Medium5.1mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which migh…Check this weekEPSS 24.89%Jun 10, 2013
- UnknownParallels Plesk Panel and Small Business Panel ScriptAlias Directive VulnerabilityPatch nowKEVEPSS 33.25%Jun 6, 2013
- Low2.6java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener…Check if you run itEPSS 6.50%Jun 1, 2013
- Medium6.8java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not…Check this weekEPSS 10.41%Jun 1, 2013
- Medium5.0Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a de…Check this weekEPSS 11.00%Jun 1, 2013
- Unknownrubyonrails rails Improper Input ValidationPatch nowKEVEPSS 98.98%May 28, 2013
- Medium5.0The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a cert…Check if you run itEPSS 2.34%May 25, 2013
- Medium5.0Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows…Check if you run itEPSS 2.31%May 25, 2013
Sort