Skip to content
OpenAdvisories

Archive

8 January 2016

Vulnerabilities first published on this day (UTC), newest first.

← December 2015 2016 / January /8 February 2016 →
  1. 112
  2. 227
  3. 316
  4. 433
  5. 510
  6. 613
  7. 7 
  8. 847
  9. 916
  10. 105
  11. 1110
  12. 1224
  13. 1328
  14. 1420
  15. 1540
  16. 167
  17. 177
  18. 188
  19. 1911
  20. 2013
  21. 21216
  22. 2215
  23. 232
  24. 24 
  25. 2511
  26. 2612
  27. 2715
  28. 281
  29. 2919
  30. 3015
  31. 3116
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.1
    CVE-2015-8766

    Symphony CMS XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) email_sendmail[from_name], (2) email_sendmail[from_address], (3…

    symphonycms/symphony-2 Packagist
  • Medium 5.4
    CVE-2015-8756

    TYPO3 CMS indexed search Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenticated editors to inject arbitrary web script or HTML via unspecified vectors.

    typo3/cms Packagist
  • Medium 5.4
    CVE-2015-8755

    Typo3 XSS Vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.

    typo3/cms Packagist
  • Medium 6.1
    CVE-2015-8760

    TYPO3 allows remote attackers to embed Flash videos from external domain

    The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."

    typo3/cms Packagist
  • Medium 5.4
    CVE-2015-8759

    TYPO3 Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.

    typo3/cms Packagist