Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
web frontend vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2024-26269
Cross-site scripting (XSS) vulnerability in the Frontend JS module's portlet.js in Liferay Portal 7.2.0 up to and including 7.4.3.37, and Liferay DXP 7.4 before update 38, 7.3 before update 11, 7.2 before fix pack 20, and older unsupported versions allows remote malicious us...
NA
CVE-2022-23502
TYPO3 is an open source PHP based web content management system. In versions before 10.4.33, 11.5.20, and 12.1.1, When users reset their password using the corresponding password recovery functionality, existing sessions for that particular user account were not revoked. This app...
Typo3 Typo3
3.5
CVSSv2
CVE-2009-3629
Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and previous versions, 4.1.x prior to 4.1.13, 4.2.x prior to 4.2.10, and 4.3.x prior to 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified...
Typo3 Typo3 4.0.2
Typo3 Typo3 4.0.3
Typo3 Typo3 4.1.0
Typo3 Typo3 4.1
Typo3 Typo3 4.1.7
Typo3 Typo3 4.1.9
Typo3 Typo3 4.2.0
Typo3 Typo3 4.2.7
Typo3 Typo3 4.2.8
Typo3 Typo3 4.2.9
Typo3 Typo3 4.0.11
Typo3 Typo3 4.0.1
Typo3 Typo3 4.0.9
Typo3 Typo3 4.1.3
Typo3 Typo3 4.1.5
Typo3 Typo3 4.1.8
Typo3 Typo3 4.2.5
Typo3 Typo3 4.2.6
Typo3 Typo3 4.3
Typo3 Typo3 4.0.12
Typo3 Typo3 4.0
Typo3 Typo3 4.0.7
5.5
CVSSv2
CVE-2009-3630
The Backend subcomponent in TYPO3 4.0.13 and previous versions, 4.1.x prior to 4.1.13, 4.2.x prior to 4.2.10, and 4.3.x prior to 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hij...
Typo3 Typo3 4.1.10
Typo3 Typo3 4.1.2
Typo3 Typo3 4.1.12
Typo3 Typo3 4.1.11
Typo3 Typo3 4.2.6
Typo3 Typo3 4.2.7
Typo3 Typo3 1.1
Typo3 Typo3 1.1.09
Typo3 Typo3 3.5
Typo3 Typo3 4.1.0
Typo3 Typo3 4.1.5
Typo3 Typo3 4.1.6
Typo3 Typo3 4.2.2
Typo3 Typo3 4.2.3
Typo3 Typo3 4.3
Typo3 Typo3 1.2.0
Typo3 Typo3 1.3.0
Typo3 Typo3 3.7.1
Typo3 Typo3 3.7.x
Typo3 Typo3 4.0.2
Typo3 Typo3 4.0.3
Typo3 Typo3
4.3
CVSSv2
CVE-2009-3633
Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and previous versions, 4.1.x prior to 4.1.13, 4.2.x prior to 4.2.10, and 4.3.x prior to 4.3beta2 allows remote malicious users to inject arbitrary web script or HTML via unspecifi...
Typo3 Typo3 4.1.10
Typo3 Typo3 4.1.0
Typo3 Typo3 4.1.1
Typo3 Typo3 4.1.7
Typo3 Typo3 4.1.8
Typo3 Typo3 4.2.3
Typo3 Typo3 4.2.4
Typo3 Typo3 0.1.2
Typo3 Typo3 1.0.14
Typo3 Typo3 1.3.2
Typo3 Typo3 3.0
Typo3 Typo3 3.7.x
Typo3 Typo3 3.8
Typo3 Typo3 4.0.4
Typo3 Typo3 4.0.5
Typo3 Typo3 4.1.3
Typo3 Typo3 4.1.4
Typo3 Typo3 4.1.11
Typo3 Typo3 4.2.0
Typo3 Typo3 4.2.7
Typo3 Typo3 4.2.8
Typo3 Typo3 4.2.9
4.3
CVSSv2
CVE-2009-3636
Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and previous versions, 4.1.x prior to 4.1.13, 4.2.x prior to 4.2.10, and 4.3.x prior to 4.3beta2 allows remote malicious users to inject arbitrary web script or HTML via unspecified paramete...
Typo3 Typo3 4.1.3
Typo3 Typo3 4.1.4
Typo3 Typo3 4.1.11
Typo3 Typo3 4.2.0
Typo3 Typo3 4.2.7
Typo3 Typo3 4.2.8
Typo3 Typo3 1.1.1
Typo3 Typo3 1.1.10
Typo3 Typo3 3.5.x
Typo3 Typo3 3.6.x
Typo3 Typo3 4.0.1
Typo3 Typo3 4.0.10
Typo3 Typo3 4.0.8
Typo3 Typo3 4.0.9
Typo3 Typo3 4.1.1
Typo3 Typo3 4.1.10
Typo3 Typo3 4.1.2
Typo3 Typo3 4.1.9
Typo3 Typo3 4.1.12
Typo3 Typo3 4.2.5
Typo3 Typo3 4.2.6
Typo3 Typo3 1.1
7.5
CVSSv2
CVE-2021-30461
A remote code execution issue exists in the web UI of VoIPmonitor prior to 24.61. When the recheck option is used, the user-supplied SPOOLDIR value (which might contain PHP code) is injected into config/configuration.php.
Voipmonitor Voipmonitor
3 Github repositories
4.3
CVSSv2
CVE-2013-6242
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3 prior to 6.22.3-rev5 and 6.22.4 prior to 6.22.4-rev12 allows remote malicious users to inject arbitrary web script or HTML via the subject of an email. NOTE: the vulnerabilities related ...
Open-xchange Open-xchange Appsuite 6.22.3
Open-xchange Open-xchange Appsuite 6.22.4
Open-xchange Open-xchange Appsuite 7.2.2
Open-xchange Open-xchange Appsuite 7.4.0
4
CVSSv2
CVE-2009-3628
The Backend subcomponent in TYPO3 4.0.13 and previous versions, 4.1.x prior to 4.1.13, 4.2.x prior to 4.2.10, and 4.3.x prior to 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content form element.
Typo3 Typo3 4.1.0
Typo3 Typo3 4.1.4
Typo3 Typo3 4.1.5
Typo3 Typo3 4.2.0
Typo3 Typo3 4.2.1
Typo3 Typo3 4.1.2
Typo3 Typo3 4.1.3
Typo3 Typo3 4.1.12
Typo3 Typo3 4.1.11
Typo3 Typo3 4.2.6
Typo3 Typo3 4.2.7
Typo3 Typo3 4.2.8
Typo3 Typo3 1.1.09
Typo3 Typo3 1.1.1
Typo3 Typo3 3.5
Typo3 Typo3 3.5.x
Typo3 Typo3 4.0.1
Typo3 Typo3 4.0.10
Typo3 Typo3 4.0.7
Typo3 Typo3 4.0.8
Typo3 Typo3 4.2.9
Typo3 Typo3 4.3
6.8
CVSSv2
CVE-2009-3635
The Install Tool subcomponent in TYPO3 4.0.13 and previous versions, 4.1.x prior to 4.1.13, 4.2.x prior to 4.2.10, and 4.3.x prior to 4.3beta2 allows remote malicious users to gain access by using only the password's md5 hash as a credential.
Typo3 Typo3 4.1.10
Typo3 Typo3 4.1.2
Typo3 Typo3 4.1.9
Typo3 Typo3 4.1.12
Typo3 Typo3 4.1.11
Typo3 Typo3 4.2.6
Typo3 Typo3 4.2.7
Typo3 Typo3 1.1
Typo3 Typo3 1.1.09
Typo3 Typo3 3.5
Typo3 Typo3 3.5.x
Typo3 Typo3 4.0
Typo3 Typo3 4.0.1
Typo3 Typo3 4.0.6
Typo3 Typo3 4.0.7
Typo3 Typo3 4.1.0
Typo3 Typo3 4.1.1
Typo3 Typo3 4.1.7
Typo3 Typo3 4.1.8
Typo3 Typo3 4.2.4
Typo3 Typo3 4.2.5
Typo3 Typo3 0.1.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2024-5274
CVE-2020-17519
CVE-2024-35340
CVE-2021-47558
local
XML injection
CVE-2021-47519
CVE-2021-47543
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »