25 matches found
EUVD-2021-23367
Malware in sbrugna...
EUVD-2021-23370
Malware in sbrugna...
CVE-2021-36790
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows XSS...
CVE-2021-36789
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows SQL Injection...
CVE-2021-36792
The datednews aka Dated News extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications...
CVE-2021-36792
The datednews aka Dated News extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications...
CVE-2021-36789
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows SQL Injection...
CVE-2021-36789
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows SQL Injection...
CVE-2021-36790
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows XSS...
CVE-2021-36790
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows XSS...
CVE-2021-36791
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...
CVE-2021-36791
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...
Information disclosure
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...
Sql injection
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows SQL Injection...
Improper access control
The datednews aka Dated News extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications...
Cross site scripting
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows XSS...
CVE-2021-36792
The datednews aka Dated News extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications...
CVE-2021-36791
CVE-2021-36791 affects the TYPO3 Dated News extension (dated_news) up to version 5.1.1, enabling information disclosure of application registration data. The available sources (NVD/Red Hat/CVE records and TYPO3 advisory) confirm the vulnerability and affected component but do not include explicit...
CVE-2021-36791
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...
CVE-2021-36790
The CVE-2021-36790 entry affects the TYPO3 dated_news extension (up to version 5.1.1). The vulnerability is a Cross-Site Scripting (XSS) flaw caused by improper encoding of user input for HTML output, enabling injection of malicious scripts. Severity is reflected as MEDIUM (CVSS v2: 4.3; CVSS v3....