Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownMerge pull request #825 from eliashaeussler/typo3-core-2026-10EPSS 0.5%Oct 13, 2026
- UnknownCVE-2026-56096 is listed by Updated TYPO3 ext:solr affected versions.EPSS 0.4%Sep 17, 2026
- UnknownCVE-2026-56095 is listed by Updated TYPO3 ext:solr affected versions.EPSS 0.3%Sep 17, 2026
- UnknownCVE-2026-56094 is listed by Updated TYPO3 ext:solr affected versions.EPSS 0.3%Sep 17, 2026
- UnknownCVE-2026-56093 is listed by Updated TYPO3 ext:solr affected versions.EPSS 0.3%Sep 17, 2026
- UnknownCVE-2026-56092 is listed by Updated TYPO3 ext:solr affected versions.EPSS 0.3%Sep 17, 2026
- UnknownImproper Neutralization of Special Elements Used in a Template EngineKEVEPSS 1.0%Aug 25, 2026
- High7.1The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize().May 19, 2026
- Critical9.2The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input.EPSS 1.9%May 19, 2026
- Medium5.9The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names.EPSS 0.4%May 19, 2026
- High7.3Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table.EPSS 0.3%Apr 21, 2026
- Medium5.2The extension fails to properly define allowed classes used when deserializing transport failure metadata.EPSS 0.2%Mar 17, 2026
- Unknownluracast restler Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVNov 26, 2023
- Unknowncaddy_project caddy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVJan 26, 2022
- Unknownkennziffer statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVFeb 12, 2014
- Unknownmathieu_vidal mv_cooking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVFeb 2, 2012
- Unknownwebempoweredchurch wec_discussion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVApr 7, 2011
17 records · page 1 of 1
PreviousNext