39263 matches found
Cross-Site Scripting (XSS)
typo3/cms-core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of file extensions containing malicious sequences when accessing the server's file system directly or through synchronization, which allows an attacker to execute arbitrary scripts in the...
Information Disclosure
typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to Inline JavaScript settings within the RequireJS package, which allows an attacker to retrieve additional information about the installed system and third-party extensions...
Improper Permission Check
Wagtail is vulnerable to Improper Permission Check. The vulnerability is due to an improperly applied permission check in the wagtail.contrib.settings module, allowing users with admin access to modify settings models without proper permissions...
Arbitrary Command Execution
typo3/cms is vulnerable to Arbitrary Command Execution. The vulnerability is due to improper handling of the "From" header when an email comes from a non-trusted source and when no "Return-Path" is configured, which allows an attacker to execute arbitrary shell commands on the server. Note that...
Insecure Deserialization
typo3/cms-core is vulnerable to Insecure Deserialization. The vulnerability is due to request handling that relies on HMAC-SHA1 signing with a sensitive encryption key, which, if exposed, allows attackers to deserialize malicious payloads...
Sensitive Information Disclosure
typo3/cms-core is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the Install Tool exposing the current TYPO3 version number to non-authenticated users...
Cross-Site Scripting (XSS)
typo3/cms-core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the mishandling of t3:// URL schemes and typolink functionality, which affecting both backend forms and frontend extensions using typolink rendering, which allows attackers to execute arbitrary JavaScript within...
Insecure Deserialization
typo3/cms-form is vulnerable to Insecure Deserialization. The vulnerability is due to the PECL package "yaml" with the PHP setting yml.decodephp enabled, which allows an attacker to deserialize arbitrary YAML to PHP code. An attacker must have a valid backend user account as well yaml.decodephp...
Cross-Site Scripting (XSS)
typo3/cms-core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input encoding of notifications shown in modal windows within the TYPO3 backend, which allows an attacker with a valid backend user account to execute arbitrary JavaScript in a users browser...
Cross-Site Scripting (XSS)
typo3/cms-core is vulnerable to Cross-Site scripting XSS. The vulnerability is caused by improper user input encoding when using templates in the built-in Fluid ViewHelpers, which allows an attacker to inject malicious scripts into the browser...
Cross-Site Scripting (XSS)
typo3/cms-core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization in the Form Framework validation handling, which allows an attackers to inject malicious JavaScript...
Information Disclosure
typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to improper permission checks on the element information component, which displays properties of a certain record without verifying the backend user’s permissions...
Broken Access Control
typo3/cms-core is vulnerable to Broken Access Control. The vulnerability is due to improper restriction of import functionality, which normally is limited to admin users or those with explicit user TSconfig settings. The vulnerability enables file uploads bypassing file abstraction layer...
Information Disclosure
typo3/cms-core is vulnerable to Information Disclosure The vulnerability is due to improper session termination, where session data of authenticated users is transformed into an anonymous user session during the logout process, allowing subsequent users of the same client application to access...
Cross-Site Scripting (XSS)
typo3/cms-core is vulnerable to Cross-Site Scripting XSS. This vulnerability is due to inadequate input encoding in the FEUSERfieldName template patterns, utilized by the felogin system extension for regular frontend rendering, which allows an attackers to inject malicious scripts into the fronte...
Directory Traversal
typo3/cms-core is vulnerable to Directory Traversal. The vulnerability is due to TSconfig fields in page property backend forms, which allows an attacker to inject malicious sequences into the tsconfigincludes field which results in directory traversal...
Cross-Site Scripting (XSS)
typo3/cms-core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input encoding, which can result in XSS when rendering files from .youtube or .vimeo. Exploitation requires a valid backend user account or write access on the server system e.g., SFTP...
Information Disclosure
typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to login failures being logged at the "warning" level instead of the "debug" level, which exposes plain text credential information...
Denial Of Service (DoS)
typo3/cms-core is vulnerable to Denial of Service DoS. The vulnerability is due to a lack of size limits on media files .youtube and .vimeo in the TYPO3 backend, which results in large files consuming excessive system resources...
Out-of-bounds Write
chromium is vulnerable to Out-of-bounds Write. The vulnerability is due to inadequate bounds checking within a sandbox environment via a carefully crafted HTML page, allowing a remote attacker to execute arbitrary code...
Use-After-Free
chromium is vulnerable to Use-After-Free. The vulnerability is due to improper memory management via a crafted HTML page, potentially allowing a remote attacker to exploit heap corruption...
Use After Free
chromium is vulnerable to Use After Free. The vulnerability is due to improper memory management via a crafted HTML page, potentially allowing a remote attacker to exploit heap corruption...
Use-After-Free
chromium is vulnerable to Use-After-Free. The vulnerability is due to improper memory management via a crafted HTML page, potentially allowing a remote attacker to exploit heap corruption...
Out-Of-Bounds
chromium is vulnerable to Out-Of-Bounds. The vulnerability is due to improper handling of specific UI gestures via a crafted HTML page, potentially allowing a remote attacker to exploit heap corruption...
Use-After-Free
chromium is vulnerable to a Use-After-Free. The vulnerability is vulnerable to a use-after-free exploit within a sandbox by exploiting a crafted HTML page. The vulnerability allows a remote attacker to execute arbitrary code...
Heap Buffer Overflow
chromium is vulnerable to Heap Buffer Overflow. The vulnerability is due to improper memory handling via a crafted HTML page, which allows a remote attacker to potentially exploit heap corruption...
Denial Of Service (DoS)
typo3/cms-core is vulnerable to Denial of Service DoS. The vulnerability is due to improper session validation, which allows attackers to create an arbitrary amount of individual session-data records in the database, which results in Denial of Service...
Session Hijacking
typo3/cms-core is vulnerable to Session Hijacking. The vulnerability is due to cookies not being configured to be submitted only via HTTP, which, when combined with other vulnerabilities such as cross-site scripting, can lead to hijacking an active and valid session via the Install Tool...
Insufficiently Protected Credentials
SimpleSAMLphp is vulnerable to Insufficiently Protected Credentials. The vulnerability is due to credentials being insecurely saved to the user's session state when the ECP profile is disabled but supported in the Identity Provider's metadata, which could result in an attacker with administrator...
Code Injection
symfony is vulnerable to Code Injection. The vulnerability is due to unsanitized locale values being dumped into a PHP file generated in the cache...
Cross-site Scripting (XSS)
SimpleSAMLphp is vulnerable to Cross-site Scripting XSS. The vulnerability is due to unvalidated metadata endpoints, allowing malicious parties to substitute URLs with JavaScript code, leading to execution of the code in the user's browser if strict Content Security Policies are not enforced...
Remote Code Execution
typo3/cms-core is vulnerable to Remote Code Execution. The vulnerability is due to the ability to obfuscate Phar files as image or text files, which can then be uploaded and invoked via manipulated URLs in TYPO3 backend forms, which allows an attacker to execute arbitrary code...
XML Entity Expansion
Symfony is vulnerable to XML Entity Expansion attacks. The vulnerability is due improper xml parsing configuration, where long entities can be defined and repeatedly referenced, creating a memory sink that can be exploited for Denial of Service attacks...
Cross-Site Scripting (XSS)
typo3/cms-core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insecurely encoding information from external sources in language pack handling, which allows attackers to execute malicious scripts in the context of the user’s browser...
Unrestricted Upload Of File With Dangerous Type
typo3/cms-core is vulnerable toUnrestricted Upload of File with Dangerous Type. The vulnerability is due to missing file extensions in $GLOBALS'TYPO3CONFVARS''BE''fileDenyPattern' allowing attackers to upload files like .phar, .shtml, .pl, or .cgi, which can be executed in certain web server setu...
Information Disclosure
typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to backend users without read access being able to see specific pages in the page tree...
Sensitive Information Disclosure
Symfony is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the FragmentHandler considering all fragment render requests as coming from a trusted source, regardless of their origin, due to the inability to distinguish between legitimate ESI requests by a trusted proxy...
Insecure Credential Storage
typo3/cms-core is vulnerable to Insecure Credential Storage. The vulnerability is due to the persistence of database records containing insecure or empty credentials when certain changes are made to user account types in the TYPO3 backend, which allows an attacker to cause insecure or empty...
Session Fixation
typo3/cms-core is vulnerable to Session Fixation. The vulnerability is due to the existing sessions not being revoked when a user changes their passwords, which can be exploited by an attacker with a valid backend or frontend user account...
SQL Injection
typo3/cms-core is vulnerable to SQL injection. The vulnerability is due to improper dissociation of system-related configuration from user-generated configuration, allowing instructions to be persisted to a form definition file that were not configured to be modified. This allows attackers to...
Cross Site Scripting (XSS)
typo3/cms-core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a failure to properly encode user input in frontend forms handled by the form framework, allowing malicious users to inject and execute arbitrary JavaScript code in the context of other users' browsers...
Improper Check For Unusual Or Exceptional Conditions
libquickjs.so is vulnerable to Improper Check For Unusual Or Exceptional Conditions. The vulnerability is due to an assertion failure via JSFreeRuntimeJSRuntime at quickjs.c, which results in an application crash...
Access Control Bypass
typo3/cms-core is vulnerable to Access Control Bypass. The vulnerability is due to insufficient access control for backend users, allowing them to modify and create pages in the default language despite having limited access to specific languages...
Memory Exhaustion
braces is vulnerable to Memory Exhaustion. The vulnerability is due to improper input size restrictions, which allows an attacker to cause a Denial of Service DoS via crafted large imbalanced input to the braces method, leading to memory exhaustion and eventual application crash...
Cross-site Scripting (XSS)
org.opencms:opencms-core is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insufficient input validation in the "title" field, allowing users with sufficient privileges to insert and execute malicious JavaScript code through the admin panel...
XML Entity Expansion (XEE)
symfony/validator is vulnerable to XML Entity Expansion. The vulnerability is caused by improper XML parsing configuration, which could result in XML Entity Expansion XEE attacks that can lead to excessive memory use and potential Denial of Service DoS...
Path Traversal
twig/twig is vulnerable to Path Traversal. The vulnerability is caused by insufficient validation of user-supplied template names within the TwigLoaderFilesystem, allowing attackers to manipulate paths to access a file one level above the intended directory...
Server Side Request Forgery (SSRF)
ip is vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to some IP addresses being improperly categorized via the isPublic, isPrivate, and isLoopback methods, which allows an attacker to perform Server-Side Request Forgery SSRF if an application utilizes the library to...
Code Injection
symfony is vulnerable to Code Injection. The vulnerability is due to lack of CSRF protection for the import/export feature, allowing attackers to exploit the PHP serialized string import...