Skip to content
OpenAdvisories

Archive

November 2009

Vulnerabilities first published in this month (UTC), newest first.

← October 2009 2009 / November December 2009 →
  1. 1 
  2. 220
  3. 36
  4. 417
  5. 514
  6. 611
  7. 7 
  8. 8 
  9. 924
  10. 1029
  11. 1115
  12. 128
  13. 1312
  14. 14 
  15. 15 
  16. 1615
  17. 177
  18. 1813
  19. 194
  20. 2020
  21. 21 
  22. 22 
  23. 2310
  24. 2425
  25. 259
  26. 26 
  27. 2721
  28. 2819
  29. 29 
  30. 309
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium —
    CVE-2009-3628

    TYPO3 Backend Discloses Encryption Key

    The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content form element.

    typo3/cms-backend Packagist
  • Medium —
    CVE-2009-3636

    Typo3 API Install Tool vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameter…

    typo3/cms-install Packagist
  • Medium —
    CVE-2009-3630

    TYPO3 Backend vulnerable to Frame Hijacking

    The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hij…

    typo3/cms-backend Packagist
  • Medium —
    CVE-2009-3635

    TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential

    The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential.

    typo3/cms Packagist
  • Medium —
    CVE-2009-3633

    TYPO3 API function vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecifie…

    typo3/cms-core Packagist