Vulnerability Name CVE Severity
TYPO3 Incorrect Authorization Vulnerability (CVE-2025-47937)
TYPO3 Incorrect Authorization Vulnerability (CVE-2025-59020)
TYPO3 Insertion of Sensitive Information into Log File Vulnerability (CVE-2021-32767)
TYPO3 Insertion of Sensitive Information into Log File Vulnerability (CVE-2022-31047)
TYPO3 Insertion of Sensitive Information into Log File Vulnerability (CVE-2024-55891)
Typo3 Install Tool publicly accessible
TYPO3 Insufficient Entropy Vulnerability (CVE-2025-59015)
TYPO3 Insufficient Session Expiration Vulnerability (CVE-2022-23502)
TYPO3 Missing Authorization Vulnerability (CVE-2025-59021)
TYPO3 Observable Discrepancy Vulnerability (CVE-2022-36105)
TYPO3 Other Vulnerability (CVE-2006-0327)
TYPO3 Other Vulnerability (CVE-2009-3630)
TYPO3 Other Vulnerability (CVE-2012-1605)
TYPO3 Other Vulnerability (CVE-2012-3530)
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2717)
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3717)
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6146)
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4320)
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7073)
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7081)
TYPO3 Resource Management Errors Vulnerability (CVE-2013-1843)
TYPO3 Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-47936)
TYPO3 Session Fixation Vulnerability (CVE-2010-3671)
TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2025-47939)
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3661)
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3669)
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-15241)
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-21338)
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-55892)
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-59013)
TYPO3 Use of Insufficiently Random Values Vulnerability (CVE-2010-3666)
UAParser.js Other Vulnerability (CVE-2020-7793)
UAParser.js Uncontrolled Resource Consumption Vulnerability (CVE-2020-7733)
UAParser.js Uncontrolled Resource Consumption Vulnerability (CVE-2026-48125)
Unauthenticated OpenAI API Access
Unauthorized Access to a web app installer
Unchecked GraphQL Query Length: Potential Denial of Service Vulnerability
Undertow Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2021-3597)
Undertow CVE-2022-2764 Vulnerability (CVE-2022-2764)
Undertow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7816)
Undertow Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2018-1067)
Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-7559)
Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10687)
Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10719)
Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-20220)
Undertow Incorrect Authorization Vulnerability (CVE-2017-12196)
Unicode Transformation (Best-Fit Mapping)
Unprotected Apache NiFi API interface
Unprotected JSON file leaking secrets
Unprotected Kong Gateway Admin API interface
Unrestricted access to AnythingLLM API
Unrestricted access to MLflow
Unrestricted access to NGINX+ API interface (read only)
Unrestricted access to NGINX+ Dashboard
Unrestricted access to NGINX+ Upstream HTTP interface
Unsafe value for session tracking in WEB-INF/web.xml
URI Fragment-based iframe Source Hijack (DOM-based)
URL rewrite vulnerability
User-controlled form action
User controllable charset
User controllable tag parameter
User controllable tag parameter (DOM-based)
Vanilla Forums Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2018-15833)
Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3812)
Vanilla Forums Improper Input Validation Vulnerability (CVE-2011-0908)
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0526)
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0909)
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1009)
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9685)
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17571)
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8279)
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8825)
Vanilla Forums Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-16410)
Vanilla Forums Other Vulnerability (CVE-2011-0910)
Varnish Cache Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-4484)