1802 matches found
E-mail HTML injection
More info at https://www.passbolt.com/incidents/20190211multiplevulnerabilities...
Security Misconfiguration for Backend User Accounts
More info at https://typo3.org/security/advisory/typo3-core-sa-2019-002...
Cross-Site Scripting in Frontend User Login
More info at https://typo3.org/security/advisory/typo3-core-sa-2018-008...
Cross-Site Scripting in Backend Modal Component
More info at https://typo3.org/security/advisory/typo3-core-sa-2018-007...
EZSA-2018-005 Passwordless login for LDAP users
More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-005-passwordless-login-for-ldap-users...
SS-2018-004: XSS Vulnerability via WYSIWYG editor
More info at https://www.silverstripe.org/download/security-releases/ss-2018-004/...
Exploit of encryption failure vulnerability
More info at https://medium.com/@taylorotwell/laravel-security-release-5-6-15-and-5-5-40-56f1257933a0...
Credentials under prefixed or nested names stored in cleartext in the threat log
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-6gg9-q48h-56vx...
Plaintext credentials written to the threat log and readable by any authenticated user
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-9jh8-pj82-6ccg...
Improper access control in the newsletter module (see GHSA-3r9g-pfhv-3228)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-newsletter-module...
EZSA-2019-004 CSRF token in login form is disabled by default
More info at https://share.ez.no/community-project/security-advisories/ezsa-2019-004-csrf-token-in-login-form-is-disabled-by-default...
Cross-Site Scripting in Frontend User Login
More info at https://typo3.org/security/advisory/typo3-core-sa-2018-008...
EZSA-2018-007 User data disclosure
More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-007-user-data-disclosure...
SS-2018-010: Member disclosure in login form
More info at https://www.silverstripe.org/download/security-releases/ss-2018-010/...
SS-2016-006: Missing CSRF protection in login form
More info at https://www.silverstripe.org/download/security-releases/ss-2016-006/...
Frontend login Session Fixation
More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003/...
SS-2016-011: ChangePasswordForm does not check Member::canLogIn()
More info at https://www.silverstripe.org/download/security-releases/ss-2016-011/...
Potential security issue in login mechanism of ZendOpenId and Zend_OpenId consumer
More info at https://framework.zend.com/security/advisory/ZF2014-02...
XSS vulnerability in login redirect param
Security advisory: XSS vulnerability in login redirect param ScnSocialAuth version 1.15.2 has been released and includes a security for this vulnerability. Fix has been applied in 4a00966 Affected versions All versions below 1.15.2 are affected. dev-master is fixed starting from 4a00966 Exploits...
TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-014...
Marking a detection as a false positive could create a wider exclusion rule than intended
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-rppj-hxxm-v5pr...
Cross-site scripting in the frontend search results (see GHSA-h57j-5f5m-789v)
More info at https://contao.org/en/security-advisories/cross-site-scripting-in-the-frontend-search-results...
TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...
TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...
Signature validation bypass
More info at https://github.com/litesaml/lightsaml/security/advisories/GHSA-rm7m-7jq4-gw46...
TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework
More info at https://news.typo3.com/security/advisory/typo3-core-sa-2026-024...
Attacks go unrecorded when a request carries malformed headers or oversized fields
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-3c4c-m8xj-3vc8...
CVE-2026-109413: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process
More info at https://symfony.com/cve-2026-109413...
CVE-2026-109413: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process
More info at https://symfony.com/cve-2026-109413...
CVE-2026-108082: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
More info at https://symfony.com/cve-2026-108082...
CVE-2026-108082: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
More info at https://symfony.com/cve-2026-108082...
TYPO3-EXT-SA-2026-035: Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035...
TYPO3-EXT-SA-2026-030: Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-030...
TYPO3-EXT-SA-2026-031: Broken Access Control in extension "Analytics" (analytics)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031...
TYPO3-EXT-SA-2026-031: Insecure Direct Object Reference in extension "Analytics" (analytics)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031...
TYPO3-EXT-SA-2026-033: Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033...
TYPO3-EXT-SA-2026-035: Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035...
TYPO3-EXT-SA-2026-034: SQL Injection in extension "File manager" (ameos_filemanager)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-034...
TYPO3-EXT-SA-2026-033: Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033...
TYPO3-EXT-SA-2026-028: Broken Access Control in extension "FAL Protect" (fal_protect)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-028...
CVE-2026-109449: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process
More info at https://symfony.com/cve-2026-109449...
TYPO3-EXT-SA-2026-029: Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
TYPO3-EXT-SA-2026-029: SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
TYPO3-EXT-SA-2026-029: Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
CVE-2026-109449: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process
More info at https://symfony.com/cve-2026-109449...
TYPO3-EXT-SA-2026-032: Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-032...
Cross-site Scripting (XSS)
More info at https://security.snyk.io/vuln/SNYK-PHP-PATTERNLABDRUPALTWIGCOMPONENTS-8400872...
Cross-site Scripting (XSS)
More info at https://security.snyk.io/vuln/SNYK-PHP-DRUPALPATTERNLABUNIFIEDTWIGEXTENSIONS-8400877...