Advisories

Listing reported advisories sorted by their report date.

Arbitrary Shell Execution in Swiftmailer library
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.6

2014-10-22 09:14:25
SQL injection vector when manually quoting values for sqlsrv extension, using null byte
FriendsOfPHP

zendframework/zend-db

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.8

2014-09-16 22:00:00
Anonymous authentication in ldap_bind() function of PHP, using null byte
FriendsOfPHP

zendframework/zend-ldap

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.8

2014-09-16 22:00:00
Anonymous authentication in ldap_bind() function of PHP, using null byte
FriendsOfPHP

zendframework/zendframework

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.8

2014-09-16 22:00:00
SQL injection vector when manually quoting values for sqlsrv extension, using null byte
FriendsOfPHP

zendframework/zendframework

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.8

2014-09-16 22:00:00
Anonymous authentication in ldap_bind() function of PHP, using null byte
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.9

2014-09-16 22:00:00
SQL injection vector when manually quoting values for sqlsrv extension, using null byte
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.9

2014-09-16 22:00:00
Potential XXE security issue
FriendsOfPHP

james-heinrich/getid3

<1.9.9

2014-09-14 18:13:30
Entropy is lost in the TokenGenerator
FriendsOfPHP

friendsofsymfony/user-bundle

>=1.3.0, <1.3.5 · >=1.2.0, <1.3.0

2014-09-04 12:28:43
CSRF vulnerability in the Web Profiler
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:30
CSRF vulnerability in the Web Profiler
FriendsOfPHP

symfony/web-profiler-bundle

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:30
Direct access of ESI URLs behind a trusted proxy
FriendsOfPHP

symfony/http-kernel

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:02
Direct access of ESI URLs behind a trusted proxy
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:02
Security issue when parsing the Authorization header
FriendsOfPHP

symfony/http-foundation

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:38:23
Security issue when parsing the Authorization header
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:38:23
Denial of service with a malicious HTTP Host header
FriendsOfPHP

symfony/http-foundation

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:37:21
Denial of service with a malicious HTTP Host header
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:37:21
SS-2014-017: XML Quadratic Blowup Attack
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.11

2014-08-12 11:50:00
Fixed potential path traversal attack and remote code injection
FriendsOfPHP

willdurand/js-translation-bundle

<2.1.1

2014-07-29 11:19:06
Code injection in the way Symfony implements translation caching in FrameworkBundle
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-07-25 22:18:02
Code injection in the way Symfony implements translation caching in FrameworkBundle
FriendsOfPHP

symfony/framework-bundle

>=2.3.0, <2.3.18 · >=2.5.0, <2.5.2 · >=2.4.0, <2.4.8 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-07-15 15:35:51
The CDetailView widget allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property
FriendsOfPHP

yiisoft/yii

>=1.1.14, <1.1.15

2014-06-30 07:15:00
Sendmail transport arbitrary shell execution
FriendsOfPHP

swiftmailer/swiftmailer

>=4.0.0, <4.99.99 · >=5.0.0, <5.2.1

2014-06-13 11:45:24
Potential SQL injection in the ORDER implementation of Zend_Db_Select
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.7

2014-06-11 13:46:00
Possible Host Spoofing through SERVER_NAME
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.3

2014-05-22 09:34:08
Failing to properly encode user input, several backend components are susceptible to XSS
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.3

2014-05-22 09:34:03
Improper Session Invalidation
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.3

2014-05-22 09:33:36
Information disclosure in the Extbase framework
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.3

2014-05-22 09:33:36
The ExtJS JavaScript framework that is shipped with TYPO3 is susceptible to XSS
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.3

2014-05-22 07:34:03
Risk of mass-assignment vulnerabilities
FriendsOfPHP

illuminate/database

>=4.1.0, <4.1.29 · >=4.0.0, <4.0.99

2014-05-20 10:21:00
Risk of mass-assignment vulnerabilities
FriendsOfPHP

laravel/framework

>=4.1.0, <4.1.29 · >=4.0.0, <4.0.99

2014-05-20 10:21:00
SecurityComponent cross form submission issue
FriendsOfPHP

cakephp/cakephp

>=1.3.0, <1.3.18 · >=2.0.0, <2.4.8

2014-04-29 11:30:00
Authentication adapter did not verify validity of tokens
FriendsOfPHP

zfr/zfr-oauth2-server-module

<0.1.2

2014-04-26 20:04:29
Hijacked authentication cookies vulnerability
FriendsOfPHP

illuminate/auth

>=4.1.0, <4.1.26 · >=4.0.0, <4.0.99

2014-04-15 12:19:00
Hijacked authentication cookies vulnerability
FriendsOfPHP

laravel/framework

>=4.1.0, <4.1.26 · >=4.0.0, <4.0.99

2014-04-15 12:19:00
Insufficient input validation allows for code injection and remote execution
FriendsOfPHP

contao/core

>=2.0.0, <2.11.17 · >=3.0.0, <3.2.9

2014-04-07 10:30:27
PHP remote file inclusion vulnerability in dompdf.php
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.1

2014-03-10 21:57:58
Arbitrary file read in dompdf
FriendsOfPHP

dompdf/dompdf

>=0.6.0, <0.6.1

2014-03-10 21:57:58
XEE issue that could expose local files or easily trigger a DOS attack.
FriendsOfPHP

sabre/dav

>=1.7.0, <1.7.11 · >=1.6.0, <1.6.99 · >=1.8.0, <1.8.9

2014-02-26 22:13:46
Potential XSS vector in multiple view helpers
FriendsOfPHP

zendframework/zend-form

>=2.3.0, <2.3.1 · >=2.0.0, <2.2.7

2014-02-26 16:02:02
Potential XXE/XEE attacks using PHP functions: simplexml_load_*, DOMDocument::loadXML, and xml_parse
FriendsOfPHP

zendframework/zend-json

>=2.2.0, <2.2.6 · >=2.1.0, <2.1.6

2014-02-26 16:02:02
Potential XSS vector in multiple view helpers
FriendsOfPHP

zendframework/zend-navigation

>=2.3.0, <2.3.1 · >=2.0.0, <2.2.7

2014-02-26 16:02:02
Potential XSS vector in multiple view helpers
FriendsOfPHP

zendframework/zend-view

>=2.3.0, <2.3.1 · >=2.0.0, <2.2.7

2014-02-26 16:02:02
Potential XXE/XEE attacks using PHP functions: simplexml_load_*, DOMDocument::loadXML, and xml_parse
FriendsOfPHP

zendframework/zend-xmlrpc

>=2.2.0, <2.2.6 · >=2.1.0, <2.1.6

2014-02-26 16:02:02
Potential XXE/XEE attacks using PHP functions: simplexml_load_*, DOMDocument::loadXML, and xml_parse
FriendsOfPHP

zendframework/zendframework

>=2.2.0, <2.2.6 · >=2.1.0, <2.1.6

2014-02-26 16:02:02
Potential XSS vector in multiple view helpers
FriendsOfPHP

zendframework/zendframework

>=2.3.0, <2.3.1 · >=2.0.0, <2.2.7

2014-02-26 16:02:02
Potential XXE/XEE attacks using PHP functions: simplexml_load_*, DOMDocument::loadXML, and xml_parse
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.4

2014-02-26 16:02:02
Potential security issue in login mechanism of ZendOpenId and Zend_OpenId consumer
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.4

2014-02-17 15:37:54
Potential security issue in login mechanism of ZendOpenId and Zend_OpenId consumer
FriendsOfPHP

zendframework/zendopenid

>=2.0.0, <2.0.2

2014-02-17 15:37:54
PHP object injection vulnerability allows for arbitrary code execution
FriendsOfPHP

contao/core

>=2.0.0, <2.11.16 · >=3.0.0, <3.2.7

2014-02-13 11:12:34
« Previous Next »

Showing 5451 to 5500 of 5593 results

1 2 ... 103 104 105 106 107 108 109 110 111 112