CVE-2010-3674

TYPO3 (CMS/CMF) versions before 4.4.1 are affected by a cross-site scripting (XSS) vulnerability in the frontend search box. The issue arises from lack of proper validation of client-side data, enabling an attacker to inject scripts that run in a user’s browser. The available connected sources co...

CVE-2010-3674

TYPO3 before 4.4.1 allows XSS in the frontend search box...

CVE-2010-3674

TYPO3 before 4.4.1 allows XSS in the frontend search box...

TYPO3 cross-site scripting vulnerability (CNVD-2019-40295)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the back-end login box in TYPO3. The vulnerability stems from the lack of proper validation of client-side data by the WEB application, which...

CVE-2010-3674: Improper Neutralization of Input During Web Page Generation

TYPO3 before 4.4.1 allows XSS in the frontend search box...

PT-2019-6578

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 4.4.1 Description The issue allows for XSS in the frontend search box. Recommendations For versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue...

CVE-2010-3669

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

CVE-2010-3669

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

PT-2019-6573

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 4.2.13 TYPO3 versions 4.3.x prior to 4.3.4 TYPO3 versions 4.4.x prior to 4.4.1 Description The issue allows for XSS and Open Redirection in the frontend login box. Recommendations For versions prior to 4.2.13, update to...

CVE-2010-3669: Improper Neutralization of Input During Web Page Generation

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

CVE-2019-18659

The Wireless Emergency Alerts WEA protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is not used, as demonstrated by MessageIdentifier 4370 in LTE System Information Block 12 aka SIB12. NOTE: testing inside an RF-isolated shield box suggested that...

CVE-2019-12612

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and Bitdefender BOX be in setup...

CVE-2019-12612

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and Bitdefender BOX be in setup...

CVE-2019-12612

CVE-2019-12612 affects Bitdefender BOX firmware versions before 2.1.37.37-34. The issue allows an attacker to pass arbitrary code to the BOX appliance via the web API, requiring the attacker to be present on the Box setup network and for the BOX to be in setup mode. The connected records provide ...

PT-2019-12890

Name of the Vulnerable Software and Affected Versions Bitdefender BOX versions prior to 2.1.37.37-34 Description An issue was discovered that allows an attacker to pass arbitrary code to the BOX appliance via the web API. To exploit this, an attacker needs presence in the Bitdefender BOX setup...

CVE-2019-12612: Undefined Security Weakness

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and Bitdefender BOX be in setup...

CVE-2017-8087

Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory via via unspecified vectors...

Information disclosure

Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory via via unspecified vectors...

CVE-2017-8087

Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory via via unspecified vectors...

CVE-2017-8087

The affected device is AVM Fritz!Box 7490 running Fritz!OS 6.80 or 6.83. The issue is an information leakage in PPPoE packet padding that can allow physically proximate attackers to view slices of previously transmitted packets or portions of memory via unspecified vectors. The connected sources ...