20519 matches found
CVE-2011-1298
An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function...
CVE-2011-1298
The CVE-2011-1298 entry describes an integer overflow in WebKit’s macOS WebCore::GraphicsContext::fillRect, affecting Google Chrome before Blink M11. Connected sources replicate the same root cause (integer overflow) within WebKit used by Chrome on macOS. The NVD entry confirms the vulnerability ...
CVE-2011-4900
TYPO3 before 4.5.4 allows Information Disclosure in the backend...
CVE-2011-4630
Cross-site Scripting XSS in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the browselinks wizard...
CVE-2011-4626
Cross-site Scripting XSS in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the "JSwindow" property of the typolink function...
CVE-2011-4632
Cross-site Scripting XSS in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the tcemain flash message...
CVE-2011-4904
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...
CVE-2011-4904
CVE-2011-4904 affects TYPO3 ExtDirect in TYPO3 4.4.x and 4.5.x prior to the fixed releases. The root cause is missing access control on ExtDirect calls, allowing remote attackers to retrieve ExtDirect endpoint services. Public descriptions consistently state that TYPO3 before 4.4.9 and 4.5.x befo...
CVE-2011-4903
CVE-2011-4903: TYPO3 is vulnerable to a Cross-site Scripting (XSS) flaw in the RemoveXSS function affecting TYPO3 core releases prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. The issue allows remote attackers to inject arbitrary web script or HTML. No exploitation details are pr...
CVE-2011-4902
Summary: CVE-2011-4902 affects TYPO3 core older releases. The vulnerability allows remote attackers to delete arbitrary files on the webserver. Affected versions include TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4. The described impact is file deletion on the webserver; no exp...
CVE-2011-4901
CVE-2011-4901 affects TYPO3 prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. The issue enables remote attackers to extract arbitrary information from the TYPO3 database (information disclosure). Root cause and affected component are described in TYPO3 security advisories and relat...
CVE-2011-4900
TYPO3 before 4.5.4 is affected by an Information Disclosure vulnerability in the backend. Multiple sources (NVD, OSV, CNVD, OpenVAS advisories) confirm the flaw allows disclosure of backend information due to a root issue in access/authorization handling, with the product version range clearly st...
CVE-2011-4632
CVE-2011-4632 : TYPO3 core XSS vulnerability in TPY03 versions pre-4.3.12, pre-4.4.9 (4.4.x) and pre-4.5.4 (4.5.x). Root cause: lack of proper validation of client-side data by the web application, allowing remote attackers to inject arbitrary scripts via the tcemain flash message. Affected softw...
CVE-2011-4631
Cross-site Scripting XSS in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the system extension recycler...
CVE-2011-4630
CVE-2011-4630 is a TYPO3 core XSS vulnerability reported to affect TYPO3 versions prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. The issue allows remote attackers to inject arbitrary web script or HTML via the browse_links wizard. The available connected documents confirm the vu...
CVE-2011-4629
TYPO3 Cross-site Scripting (CVE-2011-4629) affects TYPO3 core prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. The issue allows remote attackers to inject script/HTML via the admin panel due to insufficient validation of client-side data in the web application. The vulnerability i...
CVE-2011-4628
TYPO3 core authentication bypass (CVE-2011-4628) affects TYPO3 pre-4.3.12, pre-4.4.9, and pre-4.5.4. A crafted request can bypass backend login authentication. Root cause: insecure authentication handling in TYPO3 backend. Impact: remote attacker could gain backend access. Remediation: upgrade to...
CVE-2011-4627
TYPO3 Information Disclosure (CVE-2011-4627) affects TYPO3 core prior to versions: 4.3.12 and 4.4.x prior to 4.4.9 and 4.5.x prior to 4.5.4. The vulnerability allows backend information disclosure due to the underlying flaw described in the connected advisories. Connected documents confirm the is...
CVE-2011-4626
TYPO3 CVE-2011-4626 is a cross-site scripting (XSS) vulnerability in TYPO3 core prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. It allows remote attackers to inject arbitrary web script or HTML via the JSwindow property of the typolink function. Reports in connected documents con...