İçeriğe atla
Noroxi

TYPO3 kayıtları

typo3 üreticisine ait 520 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %0,6
Pre-auth RCE
163
Düzeltme kaydı olan
%45,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

520 kayıt
  • CVE-2009-0255
    60Bu hafta

    The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with

    YüksekCVSS 7,5SilahlaştırılmışEPSS %9

    typo3 · typo322 Oca 2009

  • CVE-2019-11831
    41Planlayın

    The PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 does not prevent directory traversal

    KritikCVSS 9,8İstismar yokEPSS %5

    typo3 · pharstreamwrapper9 May 2019

  • CVE-2008-4188
    41Planlayın

    Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to execute arbitrary code

    KritikCVSS 10,0İstismar yokEPSS %4

    typo3 · secure directory23 Eyl 2008

  • CVE-2009-0258
    41Planlayın

    The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow

    KritikCVSS 10,0İstismar yokEPSS %3

    typo3 · typo322 Oca 2009

  • CVE-2010-4953
    41Planlayın

    Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitra

    KritikCVSS 10,0İstismar yokEPSS %3

    jw calendar · jw calendar9 Eki 2011

  • CVE-2009-4952
    41Planlayın

    Directory traversal vulnerability in the Directory Listing (dir_listing) extension 1.1.0 and earlier for TYPO3 allows remote attackers to ha

    KritikCVSS 10,0İstismar yokEPSS %2

    typo3 · typo322 Tem 2010

  • CVE-2008-5801
    41Planlayın

    Unspecified vulnerability in the Dictionary (rtgdictionary) extension 0.1.9 and earlier for TYPO3 allows attackers to execute arbitrary code

    KritikCVSS 10,0İstismar yokEPSS %2

    typo3 · dictionary extension31 Ara 2008

  • CVE-2009-3819
    41Planlayın

    Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute a

    KritikCVSS 10,0İstismar yokEPSS %2

    typo3 · typo328 Eki 2009

  • CVE-2013-6288
    41Planlayın

    Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors,

    KritikCVSS 10,0İstismar yokEPSS %2

    typo3 · typo328 Eki 2013

  • CVE-2010-4889
    41Planlayın

    Unspecified vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows attackers to execute arbitrary cod

    KritikCVSS 10,0İstismar yokEPSS %2

    typo3 · typo37 Eki 2011

  • CVE-2008-2345
    41Planlayın

    Unspecified vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code

    KritikCVSS 10,0İstismar yokEPSS %1

    typo3 · air filemanager19 May 2008

  • CVE-2013-5303
    41Planlayın

    Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, rela

    KritikCVSS 10,0İstismar yokEPSS %1

    typo3 · typo316 Ağu 2013

  • CVE-2009-0815
    40Planlayın

    The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alp

    OrtaCVSS 5,0SilahlaştırılmışEPSS %42

    typo3 · typo34 Mar 2009

  • CVE-2010-3714
    40Planlayın

    The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x bef

    YüksekCVSS 7,1SilahlaştırılmışEPSS %24

    typo3 · typo325 Eki 2010

  • CVE-2020-15086
    40Planlayın

    Potential Remote Code Execution in TYPO3 with mediace extension

    KritikCVSS 9,8İstismar yokEPSS %3

    typo3 · mediace29 Tem 2020

  • CVE-2019-11830
    40Planlayın

    PharMetaDataInterceptor in the PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 mishandle

    KritikCVSS 9,8İstismar yokEPSS %2

    typo3 · pharstreamwrapper9 May 2019

  • CVE-2020-11066
    40Planlayın

    Improperly Controlled Modification of Dynamically-Determined Object Attributes in TYPO3 CMS

    KritikCVSS 10,0İstismar yokEPSS %1

    typo3 · typo313 May 2020

  • CVE-2008-3042
    40Planlayın

    Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors rel

    KritikCVSS 10,0İstismar yokEPSS %1

    typo3 · dam frontend extension7 Tem 2008

  • CVE-2009-3818
    40Planlayın

    Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown

    KritikCVSS 10,0İstismar yokEPSS %1

    typo3 · typo328 Eki 2009

  • CVE-2011-4628
    39İzleyin

    TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms in the backend t

    KritikCVSS 9,8İstismar yokEPSS %1

    typo3 · typo36 Kas 2019

  • CVE-2011-3583
    39İzleyin

    It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could

    KritikCVSS 9,8İstismar yokEPSS %1

    typo3 · typo325 Kas 2019

  • CVE-2010-3663
    36İzleyin

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileD

    YüksekCVSS 8,8İstismar yokEPSS %2

    typo3 · typo34 Kas 2019

  • CVE-2017-14251
    36İzleyin

    Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6

    YüksekCVSS 8,8İstismar yokEPSS %2

    typo3 · typo311 Eyl 2017

  • CVE-2020-15098
    36İzleyin

    Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS

    YüksekCVSS 8,8İstismar yokEPSS %2

    typo3 · typo329 Tem 2020

  • CVE-2020-11067
    36İzleyin

    Deserialization of Untrusted Data in TYPO3 CMS

    YüksekCVSS 8,8İstismar yokEPSS %1

    typo3 · typo313 May 2020