VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

严重高危中危低危Exploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

typo3oracleibmgoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

typo3 products

typo3 217dam frontend extension 4html sanitizer 4wec discussion forum 4pdf generator 2 extension 3address directory 2air filemanager 2beuserswitch 2commerce extension 2eluna page comments extension 2pharstreamwrapper 2sql frontend extension 2sr feuser register extension

402,878 vulnerabilities · 1,766 actively exploited (CISA KEV)

typo3 ✕Clear filters

314 results

ID	Severity	Summary	Published
CVE-2011-4904	中危6.5	TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.	06/11/2019
CVE-2011-4903	中危6.1	Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the RemoveXSS function.	06/11/2019
CVE-2011-4902	中危6.5	TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver.	06/11/2019
CVE-2011-4901	中危6.5	TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database.