Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

chris john riley vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-0258
The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 up to and including 4.0.9, 4.1.0 up to and including 4.1.7, and 4.2.0 up to and including 4.2.3 allows remote malicious users to execute arbitrary commands via a crafted filename containing shell metachara...
Typo3 Typo3 4.0.4Typo3 Typo3 4.0.5Typo3 Typo3 4.1.0Typo3 Typo3 4.1.1Typo3 Typo3 4.2.0Typo3 Typo3 4.2.1Typo3 Typo3 4.2.2Typo3 Typo3 4.0.2Typo3 Typo3 4.0.3Typo3 Typo3 4.1.6Typo3 Typo3 4.1.7Typo3 Typo3 4.0Typo3 Typo3 4.0.1Typo3 Typo3 4.0.8Typo3 Typo3 4.0.9Typo3 Typo3 4.1.4Typo3 Typo3 4.1.5Typo3 Typo3 4.0.6Typo3 Typo3 4.0.7Typo3 Typo3 4.1.2Typo3 Typo3 4.1.3Typo3 Typo3 4.2.3
7.5
CVSSv3
CVE-2009-0255
The System extension Install tool in TYPO3 4.0.0 up to and including 4.0.9, 4.1.0 up to and including 4.1.7, and 4.2.0 up to and including 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for malicious users to crack the key.
Typo3 Typo3Debian Debian Linux 4.0
NA
CVE-2009-0256
Session fixation vulnerability in the authentication library in TYPO3 4.0.0 up to and including 4.0.9, 4.1.0 up to and including 4.1.7, and 4.2.0 up to and including 4.2.3 allows remote malicious users to hijack web sessions via unspecified vectors related to (1) frontend and (2)...
Typo3 Typo3 4.0.4Typo3 Typo3 4.0.5Typo3 Typo3 4.1.0Typo3 Typo3 4.1.1Typo3 Typo3 4.2.1Typo3 Typo3 4.2.2Typo3 Typo3 4.0.2Typo3 Typo3 4.0.3Typo3 Typo3 4.1.6Typo3 Typo3 4.1.7Typo3 Typo3 4.2.0Typo3 Typo3 4.0Typo3 Typo3 4.0.1Typo3 Typo3 4.0.8Typo3 Typo3 4.0.9Typo3 Typo3 4.1.4Typo3 Typo3 4.1.5Typo3 Typo3 4.0.6Typo3 Typo3 4.0.7Typo3 Typo3 4.1.2Typo3 Typo3 4.1.3Typo3 Typo3 4.2.3
NA
CVE-2009-0257
Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 up to and including 4.0.9, 4.1.0 up to and including 4.1.7, and 4.2.0 up to and including 4.2.3 allow remote malicious users to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files...
Typo3 Typo3 4.0.4Typo3 Typo3 4.0.5Typo3 Typo3 4.1.0Typo3 Typo3 4.1.1Typo3 Typo3 4.2.0Typo3 Typo3 4.2.1Typo3 Typo3 4.2.2Typo3 Typo3 4.0.2Typo3 Typo3 4.0.3Typo3 Typo3 4.1.6Typo3 Typo3 4.1.7Typo3 Typo3 4.0Typo3 Typo3 4.0.1Typo3 Typo3 4.0.8Typo3 Typo3 4.0.9Typo3 Typo3 4.1.4Typo3 Typo3 4.1.5Typo3 Typo3 4.0.6Typo3 Typo3 4.0.7Typo3 Typo3 4.1.2Typo3 Typo3 4.1.3Typo3 Typo3 4.2.3
NA
CVE-2013-2503
Privoxy prior to 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.
Privoxy Privoxy 3.0.15Privoxy Privoxy 3.0.14Privoxy Privoxy 3.0.6Privoxy Privoxy 3.0.5Privoxy Privoxy 2.9.13Privoxy Privoxy 2.9.12Privoxy Privoxy 2.9.0Privoxy Privoxy 3.0.17Privoxy Privoxy 3.0.16Privoxy Privoxy 3.0.8Privoxy Privoxy 3.0.7Privoxy Privoxy 2.9.16Privoxy Privoxy 2.9.14Privoxy Privoxy 2.9.2Privoxy Privoxy 2.9.1Privoxy PrivoxyPrivoxy Privoxy 3.0.13Privoxy Privoxy 3.0.12Privoxy Privoxy 3.0.11Privoxy Privoxy 3.0.3Privoxy Privoxy 3.0.2Privoxy Privoxy 2.9.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook