Advisories

Listing reported advisories sorted by their report date.

Anonymous Open Redirect - Moderately Critical - Open Redirect
FriendsOfPHP

drupal/drupal

>=8.6.0, <8.6.2 · >=8.5.0, <8.5.8 · >=8.4.0, <8.5.0 · >=8.3.0, <8.4.0 · >=8.2.0, <8.3.0 · >=8.1.0, <8.2.0 · >=8.0.0, <8.1.0

2018-10-17 22:19:00
Injection in DefaultMailSystem::mail() - Critical - Remote Code Execution
FriendsOfPHP

drupal/drupal

>=8.6.0, <8.6.2 · >=8.5.0, <8.5.8 · >=8.4.0, <8.5.0 · >=8.3.0, <8.4.0 · >=8.2.0, <8.3.0 · >=8.1.0, <8.2.0 · >=8.0.0, <8.1.0 · >=7.0, <7.60

2018-10-17 22:19:00
Contextual Links validation - Critical - Remote Code Execution
FriendsOfPHP

drupal/drupal

>=8.6.0, <8.6.2 · >=8.5.0, <8.5.8 · >=8.4.0, <8.5.0 · >=8.3.0, <8.4.0 · >=8.2.0, <8.3.0 · >=8.1.0, <8.2.0 · >=8.0.0, <8.1.0

2018-10-17 22:19:00
Action case insensitivity
FriendsOfPHP

alterphp/easyadmin-extension-bundle

>=1.2.0, <1.2.11 · >=1.3.0, <1.3.1

2018-10-02 00:01:00
Potential enwiki DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
FriendsOfPHP

mediawiki/core

>=1.31.0, <1.31.2 · >=1.30.0, <1.30.2 · >=1.27.0, <1.27.6

2018-09-20 22:06:04
$wgRateLimits (rate limit / ping limiter) entry for 'user' overrides that for 'newbie'
FriendsOfPHP

mediawiki/core

>=1.31.0, <1.31.1 · >=1.30.0, <1.30.1 · >=1.29.0, <1.29.3 · >=1.27.0, <1.27.5

2018-09-20 19:59:28
BotPassword can bypass CentralAuth's account lock
FriendsOfPHP

mediawiki/core

>=1.31.0, <1.31.1 · >=1.30.0, <1.30.1 · >=1.29.0, <1.29.3 · >=1.27.0, <1.27.5

2018-09-20 19:59:28
1.31.0 tarball is missing .htaccess files
FriendsOfPHP

mediawiki/core

>=1.31.0, <1.31.1

2018-09-20 19:59:28
Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
FriendsOfPHP

fooman/tcpdf

<6.2.22

2018-09-20 05:24:43
Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
FriendsOfPHP

tecnickcom/tcpdf

<6.2.22

2018-09-14 15:26:29
Magento 2.2.6 and 2.1.15 Security update
FriendsOfPHP

magento/product-community-edition

>=2.1, <2.1.15 · >=2.2, <2.2.6

2018-09-10 00:00:00
Cookie serialization vulnerability
FriendsOfPHP

illuminate/cookie

>=5.4.0, <=5.4.36 · >=5.3.0, <=5.3.31 · >=5.2.0, <=5.2.45 · >=5.1.0, <=5.1.46 · >=5.0.0, <=5.0.35 · >=4.2.0, <=4.2.22 · >=4.1.0, <=4.1.31 · >=4.0.0, <=4.0.11 · >=5.6.0, <5.6.30 · >=5.5.0, <5.5.42

2018-08-07 18:07:12
Cookie serialization vulnerability
FriendsOfPHP

laravel/framework

>=5.4.0, <=5.4.36 · >=5.3.0, <=5.3.31 · >=5.2.0, <=5.2.45 · >=5.1.0, <=5.1.46 · >=5.0.0, <=5.0.35 · >=4.2.0, <=4.2.22 · >=4.1.0, <=4.1.31 · >=4.0.0, <=4.0.11 · >=5.6.0, <5.6.30 · >=5.5.0, <5.5.42

2018-08-07 18:07:12
CVE-2018-14773: Remove support for legacy and risky HTTP headers
FriendsOfPHP

symfony/http-foundation

>=4.0.0, <4.0.14 · >=3.4.0, <3.4.14 · >=3.3.0, <3.3.18 · >=2.8.0, <2.8.44 · >=2.7.0, <2.7.49 · >=4.1.0, <4.1.3 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2018-08-01 17:30:00
CVE-2018-14773: Remove support for legacy and risky HTTP headers
FriendsOfPHP

symfony/symfony

>=4.0.0, <4.0.14 · >=3.4.0, <3.4.14 · >=3.3.0, <3.3.18 · >=2.8.0, <2.8.44 · >=2.7.0, <2.7.49 · >=4.1.0, <4.1.3 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2018-08-01 17:30:00
SS-2018-016: Unsafe SQL Query Construction (Safe Data Source)
FriendsOfPHP

silverstripe/subsites

>=2.0.0, <2.1.1

2018-07-25 09:55:14
SS-2018-017: Possible PHP Object Injection via Multi-Value Field Extension
FriendsOfPHP

symbiote/silverstripe-multivaluefield

>=3.0.0, <3.0.99

2018-07-16 17:29:04
Authentication Bypass in TYPO3 CMS
FriendsOfPHP

typo3/cms-core

>=8.0.0, <8.7.17 · >=9.0.0, <9.3.2

2018-07-12 09:34:56
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS
FriendsOfPHP

typo3/cms-core

>=8.0.0, <8.7.17 · >=9.0.0, <9.3.2

2018-07-12 09:34:56
Privilege Escalation & SQL Injection in TYPO3 CMS
FriendsOfPHP

typo3/cms-core

>=8.5.0, <8.7.17 · >=9.0.0, <9.3.2

2018-07-12 09:34:56
Insecure Deserialization in TYPO3 CMS
FriendsOfPHP

typo3/cms-core

>=8.5.0, <8.7.17 · >=9.0.0, <9.3.2

2018-07-12 09:34:56
Authentication Bypass in TYPO3 CMS
FriendsOfPHP

typo3/cms

>=8.0.0, <8.7.17 · >=7.0.0, <7.6.30 · >=9.0.0, <9.3.2

2018-07-12 09:34:56
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS
FriendsOfPHP

typo3/cms

>=8.0.0, <8.7.17 · >=7.0.0, <7.6.30 · >=9.0.0, <9.3.2

2018-07-12 09:34:56
Privilege Escalation & SQL Injection in TYPO3 CMS
FriendsOfPHP

typo3/cms

>=8.5.0, <8.7.17 · >=9.0.0, <9.3.2

2018-07-12 09:34:56
Insecure Deserialization in TYPO3 CMS
FriendsOfPHP

typo3/cms

>=8.5.0, <8.7.17 · >=9.0.0, <9.3.2

2018-07-12 09:34:56
CSRF vulnerability in the admin panel
FriendsOfPHP

sylius/admin-bundle

>=1.0.0, <1.0.17 · >=1.2.0, <1.2.2 · >=1.1.0, <1.1.9

2018-07-09 00:26:07
CSRF vulnerability in the admin panel
FriendsOfPHP

sylius/sylius

>=1.0.0, <1.0.17 · >=1.2.0, <1.2.2 · >=1.1.0, <1.1.9

2018-07-09 00:26:07
When a log event is (partially) hidden Special:Redirect/logid can link to the incorrect log and reveal hidden information
FriendsOfPHP

mediawiki/core

>=1.31.0, <1.31.1 · >=1.30.0, <1.30.1 · >=1.29.0, <1.29.3 · >=1.27.0, <1.27.5

2018-07-07 11:36:22
SUPEE-10752 - Multiple security enhancements vulnerabilities
FriendsOfPHP

magento/magento1ce

<1.9.3.9

2018-06-29 00:00:00
Adminer script versions up to 4.6.2 contains file disclosure vulnerability
FriendsOfPHP

vrana/adminer

<4.6.3

2018-06-28 00:00:00
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
FriendsOfPHP

magento/product-community-edition

>=2.2, <2.2.6 · >=2.1, <2.2 · >=2.0, <2.1

2018-06-27 14:12:00
Magento 2.2.5 and 2.1.14 Security update
FriendsOfPHP

magento/product-community-edition

>=2.1, <2.1.14 · >=2.2, <2.2.5

2018-06-27 00:00:00
URL Rewrite vulnerability
FriendsOfPHP

zendframework/zend-diactoros

>=1.0.0, <1.8.4

2018-06-11 15:28:00
URL Rewrite vulnerability
FriendsOfPHP

zendframework/zend-feed

>=1.0.0, <2.10.3

2018-06-11 15:28:00
URL Rewrite vulnerability
FriendsOfPHP

zendframework/zend-http

>=1.0.0, <2.8.1

2018-06-11 15:28:00
URL Rewrite vulnerability
FriendsOfPHP

zendframework/zendframework

<2.5.0

2018-06-11 15:28:00
SS-2018-013: Passwords sent back to browsers under some circumstances
FriendsOfPHP

silverstripe/framework

>=4.1.0, <4.1.1 · >=4.0.3, <4.0.4 · >=3.5.5, <3.7.0

2018-06-08 12:19:40
SS-2018-015: Vulnerable dependency
FriendsOfPHP

silverstripe/comments

>=2.0.0, <2.9.99 · >=1.3.0, <1.9.99 · >=3.0.0, <3.1.1

2018-05-29 18:56:27
PHP Code Injection
FriendsOfPHP

jsmitty12/phpwhois

<5.1.0

2018-05-29 18:12:55
SS-2018-011: SQL injection vulnerability
FriendsOfPHP

silverstripe/taxonomy

>=2.0.0, <2.0.1 · >=1.3.0, <1.3.1

2018-05-28 20:40:43
CVE-2018-11386: Denial of service when using PDOSessionHandler
FriendsOfPHP

symfony/http-foundation

>=4.0.0, <4.0.11 · >=3.4.0, <3.4.11 · >=3.3.0, <3.3.17 · >=2.8.0, <2.8.41 · >=2.7.0, <2.7.48 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2018-05-25 14:04:47
CVE-2018-11406: CSRF Token Fixation
FriendsOfPHP

symfony/security-bundle

>=4.0.0, <4.0.11 · >=3.4.0, <3.4.11 · >=3.3.0, <3.3.17 · >=2.8.0, <2.8.41 · >=2.7.0, <2.7.48 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2018-05-25 14:04:47
CVE-2018-11408: Open redirect vulnerability on security handlers
FriendsOfPHP

symfony/security-bundle

>=2.7.38, <2.7.48 · >=4.0.0, <4.0.11 · >=3.4.0, <3.4.11 · >=3.3.0, <3.3.17 · >=2.8.0, <2.8.41 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2018-05-25 14:04:47
CVE-2018-11407: Unauthorized access on a misconfigured LDAP server when using an empty password
FriendsOfPHP

symfony/security-core

>=3.3.0, <3.3.17 · >=2.8.0, <2.8.37 · >=4.0.0, <4.0.7 · >=3.4.0, <3.4.7 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2018-05-25 14:04:47
CVE-2018-11406: CSRF Token Fixation
FriendsOfPHP

symfony/security-csrf

>=4.0.0, <4.0.11 · >=3.4.0, <3.4.11 · >=3.3.0, <3.3.17 · >=2.8.0, <2.8.41 · >=2.7.0, <2.7.48 · >=2.6.0, <2.7.48 · >=2.5.0, <2.7.48 · >=2.4.0, <2.7.48 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2018-05-25 14:04:47
CVE-2018-11385: Session Fixation Issue for Guard Authentication
FriendsOfPHP

symfony/security-guard

>=4.0.0, <4.0.11 · >=3.4.0, <3.4.11 · >=3.3.0, <3.3.17 · >=2.8.0, <2.8.41 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2018-05-25 14:04:47
CVE-2018-11385: Session Fixation Issue for Guard Authentication
FriendsOfPHP

symfony/security-http

>=4.0.0, <4.0.11 · >=3.4.0, <3.4.11 · >=3.3.0, <3.3.17 · >=2.8.0, <2.8.41 · >=2.7.0, <2.7.48 · >=2.6.0, <2.7.48 · >=2.5.0, <2.7.48 · >=2.4.0, <2.7.48 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2018-05-25 14:04:47
CVE-2018-11406: CSRF Token Fixation
FriendsOfPHP

symfony/security-http

>=4.0.0, <4.0.11 · >=3.4.0, <3.4.11 · >=3.3.0, <3.3.17 · >=2.8.0, <2.8.41 · >=2.7.0, <2.7.48 · >=2.6.0, <2.7.48 · >=2.5.0, <2.7.48 · >=2.4.0, <2.7.48 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2018-05-25 14:04:47
CVE-2018-11385: Session Fixation Issue for Guard Authentication
FriendsOfPHP

symfony/security

>=4.0.0, <4.0.11 · >=3.4.0, <3.4.11 · >=3.3.0, <3.3.17 · >=2.8.0, <2.8.41 · >=2.7.0, <2.7.48 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2018-05-25 14:04:47
CVE-2018-11406: CSRF Token Fixation
FriendsOfPHP

symfony/security

>=4.0.0, <4.0.11 · >=3.4.0, <3.4.11 · >=3.3.0, <3.3.17 · >=2.8.0, <2.8.41 · >=2.7.0, <2.7.48 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2018-05-25 14:04:47
« Previous Next »

Showing 5001 to 5050 of 5593 results

1 2 ... 98 99 100 101 102 103 104 ... 111 112