1961 matches found
EZSA-2017-006 Information disclosure in backend content tree menu
More info at http://share.ez.no/community-project/security-advisories/ezsa-2017-006-information-disclosure-in-backend-content-tree-menu...
SS-2017-003: XSS in RedirectorPage
More info at https://www.silverstripe.org/download/security-releases/ss-2017-003/...
SS-2017-002: Member disclosure in login form
More info at https://www.silverstripe.org/download/security-releases/ss-2017-002/...
SUPEE-9652 - Remote Code Execution using mail vulnerability
More info at https://magento.com/security/patches/supee-9652...
Cross-Site Scripting in TYPO3 Backend
More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-014/...
SS-2016-003: Hostname, IP and Protocol Spoofing through HTTP Headers
More info at https://www.silverstripe.org/download/security-releases/ss-2016-003/...
SS-2015-013: X-Forwarded-Host request hostname injection
More info at https://www.silverstripe.org/software/download/security-releases/ss-2015-013/...
User authentication bypass
More info at https://thelia.net/version-2-1-3-with-security-fix...
Authentication Vulnerability - possible attempt to login via zero-valued password credential
Security advisory: zero-valued authentication credentials vulnerability DoctrineModule version 0.7.2 has been just released and includes a security fix for 248 via @5f79a9f7b and @78018ef568, Affected versions All versions below 0.7.2 are affected. dev-master and 0.8.x are not affected starting...
Route Parameter Injection Via Query String in Zend\Mvc
More info at https://framework.zend.com/security/advisory/ZF2013-01...
CVE-2026-109413: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process
More info at https://symfony.com/cve-2026-109413...
PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling
More info at https://github.com/sebastianbergmann/phpunit/security/advisories/GHSA-9vw2-f4vp-x7gf...
TYPO3-EXT-SA-2026-031: Broken Access Control in extension "Analytics" (analytics)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031...
TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...
TYPO3-EXT-SA-2026-029: Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
EZSA-2019-002 Password reset vulnerability
More info at https://share.ez.no/community-project/security-advisories/ezsa-2019-002-password-reset-vulnerability...
EZSA-2019-001 XSS in Admin UI
More info at https://share.ez.no/community-project/security-advisories/ezsa-2019-001-xss-in-admin-ui...
SS-2018-004: XSS Vulnerability via WYSIWYG editor
More info at https://www.silverstripe.org/download/security-releases/ss-2018-004/...
SS-2017-009: Users inadvertently passing sensitive data to LoginAttempt
More info at https://www.silverstripe.org/download/security-releases/ss-2017-009/...
SS-2017-005: User enumeration via timing attack on login and password reset forms
More info at https://www.silverstripe.org/download/security-releases/ss-2017-005/...
Remote Code Execution Vulnerability
More info at https://community.shopware.com/detail1989.html...
Missing Access Check in TYPO3 CMS
More info at https://typo3.org/teamssecuritysecurity-bulletins/security-bulletins-single-view/article/missing-access-check-in-typo3-cms/...
Exploit of encryption failure vulnerability
More info at https://medium.com/@taylorotwell/laravel-security-release-5-6-15-and-5-5-40-56f1257933a0...
CVE-2026-108082: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
More info at https://symfony.com/cve-2026-108082...
TYPO3-EXT-SA-2026-034: SQL Injection in extension "File manager" (ameos_filemanager)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-034...
TYPO3-EXT-SA-2026-028: Broken Access Control in extension "FAL Protect" (fal_protect)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-028...
TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework
More info at https://news.typo3.com/security/advisory/typo3-core-sa-2026-024...
E-mail HTML injection
More info at https://www.passbolt.com/incidents/20190211multiplevulnerabilities...
Cross-Site Scripting in Frontend User Login
More info at https://typo3.org/security/advisory/typo3-core-sa-2018-008...
Cross-Site Scripting in Backend Modal Component
More info at https://typo3.org/security/advisory/typo3-core-sa-2018-007...
EZSA-2018-007 User data disclosure
More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-007-user-data-disclosure...
EZSA-2018-009 Do not interpret PHP/PHAR uploads
More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-009-do-not-interpret-php-phar-uploads...
TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-014...
TYPO3-EXT-SA-2026-029: SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
TYPO3-EXT-SA-2026-029: Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
Signature validation bypass
More info at https://github.com/litesaml/lightsaml/security/advisories/GHSA-rm7m-7jq4-gw46...
Marking a detection as a false positive could create a wider exclusion rule than intended
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-rppj-hxxm-v5pr...
EZSA-2019-004 CSRF token in login form is disabled by default
More info at https://share.ez.no/community-project/security-advisories/ezsa-2019-004-csrf-token-in-login-form-is-disabled-by-default...
Cross-Site Scripting in Frontend User Login
More info at https://typo3.org/security/advisory/typo3-core-sa-2018-008...
EZSA-2018-005 Passwordless login for LDAP users
More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-005-passwordless-login-for-ldap-users...
SS-2016-006: Missing CSRF protection in login form
More info at https://www.silverstripe.org/download/security-releases/ss-2016-006/...
Frontend login Session Fixation
More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003/...
SS-2016-011: ChangePasswordForm does not check Member::canLogIn()
More info at https://www.silverstripe.org/download/security-releases/ss-2016-011/...
Potential security issue in login mechanism of ZendOpenId and Zend_OpenId consumer
More info at https://framework.zend.com/security/advisory/ZF2014-02...
SS-2018-010: Member disclosure in login form
More info at https://www.silverstripe.org/download/security-releases/ss-2018-010/...
CVE-2026-109449: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process
More info at https://symfony.com/cve-2026-109449...
Attacks go unrecorded when a request carries malformed headers or oversized fields
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-3c4c-m8xj-3vc8...
XSS vulnerability in login redirect param
Security advisory: XSS vulnerability in login redirect param ScnSocialAuth version 1.15.2 has been released and includes a security for this vulnerability. Fix has been applied in 4a00966 Affected versions All versions below 1.15.2 are affected. dev-master is fixed starting from 4a00966 Exploits...
TYPO3-EXT-SA-2026-038: Broken Access Control in extension "Frontend User Registration" (sf_register)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-038...
CVE-2026-118513: X509Authenticator and X509AuthenticationListener Read Escaped RFC 2253 Commas and Bare Slashes Inside a DN Value as RDN Boundaries: Incomplete Fix for CVE-2026-45063
More info at https://symfony.com/cve-2026-118513...