Security Bulletins:

It has been discovered, that the backend login brute force protection can be bypassed

It has been discovered, that third party component Flowplayer Flash is vulnerable to cross-site scripting.

It has been discovered that TYPO3 CMS 4.5.x is vulnerable to Authentication Bypass.

It has been discovered that TYPO3 CMS is vulnerable to Link Spoofing and Cache Poisoning.

It has been discovered that TYPO3 CMS is vulnerable to Denial of Service and Arbitrary Shell Execution!

It has been discovered that TYPO3 CMS is vulnerable to Cross-Site Scripting, Insecure Unserialize, Improper Session Invalidation, Authentication…

It has been discovered that TYPO3 CMS is vulnerable to Cross-Site Scripting, Information Disclosure, Mass Assignment, Open Redirection and Insecure…

It has been discovered that TYPO3 Core has Incomplete Access Management and is vulnerable to Remote Code Execution

It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting and Remote Code Execution

It has been discovered that TYPO3 Core is susceptible to SQL Injection and Open Redirection