Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to inject arb…Check if you run itEPSS 1.04%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the UrlTool (aeurltool) extension 0.1.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspec…Check if you run itEPSS 1.04%Feb 14, 2012
- Medium5.0Unspecified vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.Check if you run itEPSS 1.24%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML…Check if you run itEPSS 1.05%Feb 14, 2012
- Medium6.8Cross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authen…Check if you run itEPSS 0.59%Feb 14, 2012
- Low3.5Cross-site scripting (XSS) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote authenticated users to inject arbitra…Check if you run itEPSS 0.85%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Yet another Google search (ya_googlesearch) extension before 0.3.10 for TYPO3 allows remote attackers to inject arbitra…Check if you run itEPSS 1.05%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Euro Calculator (skt_eurocalc) extension 0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspe…Check if you run itEPSS 1.04%Feb 14, 2012
- Medium6.5Unspecified vulnerability in the Webservices for TYPO3 (typo3_webservice) extension before 0.3.8 for TYPO3 allows remote authenticated users to execute arbitrary code…Check if you run itEPSS 1.90%Feb 14, 2012
- Medium5.0The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improp…Check if you run itEPSS 1.28%Feb 14, 2012
- High7.5SQL injection vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL c…Check if you run itEPSS 1.10%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.22%Feb 14, 2012
- High7.5SQL injection vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspec…Check if you run itEPSS 1.29%Feb 14, 2012
- High7.5SQL injection vulnerability in the White Papers (mm_whtppr) extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.11%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web sc…Check if you run itEPSS 1.05%Feb 14, 2012
- High7.5SQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via u…Check if you run itEPSS 1.11%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrar…Check if you run itEPSS 1.05%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in lib/class.tx_jftcaforms_tceFunc.php in the Additional TCA Forms (jftcaforms) extension before 0.2.1 for TYPO3 allows remote…Check if you run itEPSS 1.05%Feb 14, 2012
- Medium5.8Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary…Check if you run itEPSS 1.10%Feb 14, 2012
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 82.26%Feb 10, 2012
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to…Check this weekEPSS 32.78%Feb 7, 2012
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or…Check this weekEPSS 56.61%Feb 7, 2012
- High7.5mathieu_vidal mv_cooking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.29%Feb 2, 2012
- High7.5wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which…Check if you run itEPSS 9.02%Jan 30, 2012
- Medium4.3protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, w…Check this weekEPSS 82.20%Jan 28, 2012
Sort