Advisories

Listing reported advisories sorted by their report date.

Email address can be matched to an account
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Session data truncation can lead to unserialization of user provided data
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
File upload access bypass and denial of service
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Brute force amplification attacks via XML-RPC
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via path manipulation
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Form API ignores access restrictions on submit buttons
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
HTTP header injection using line breaks
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via double-encoded 'destination' parameter
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Reflected file download vulnerability
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Saving user accounts can sometimes grant the user all roles
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Email address can be matched to an account
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Session data truncation can lead to unserialization of user provided data
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Composer Cache Injection vulnerability
FriendsOfPHP

composer/composer

<=1.0.0-alpha11

2016-02-10 14:51:23
CVE-2016-1902: SecureRandom's fallback not secure when OpenSSL fails
FriendsOfPHP

symfony/security-core

>=2.6.0, <2.6.13 · >=2.7.0, <2.7.9 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2016-01-14 10:07:40
CVE-2016-1902: SecureRandom's fallback not secure when OpenSSL fails
FriendsOfPHP

symfony/security

>=2.6.0, <2.6.13 · >=2.3.0, <2.3.37 · >=2.7.0, <2.7.9 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2016-01-14 10:07:40
CVE-2016-1902: SecureRandom's fallback not secure when OpenSSL fails
FriendsOfPHP

symfony/symfony

>=2.6.0, <2.6.13 · >=2.3.0, <2.3.37 · >=2.7.0, <2.7.9 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2016-01-14 10:07:40
Local File Disclosure
FriendsOfPHP

phpmailer/phpmailer

>=5.0.0, <5.2.22

2016-01-06 21:35:04
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16 · >=7.6.0, <7.6.1 · >=7.5.0, <7.6.0 · >=7.4.0, <7.5.0 · >=7.3.0, <7.4.0 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-12-15 11:38:00
Cross-Site Scripting vulnerability in typolinks
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16 · >=7.6.0, <7.6.1 · >=7.5.0, <7.6.0 · >=7.4.0, <7.5.0 · >=7.3.0, <7.4.0 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-12-15 11:38:00
Multiple Cross-Site Scripting vulnerabilities in frontend
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16 · >=7.6.0, <7.6.1 · >=7.5.0, <7.6.0 · >=7.4.0, <7.5.0 · >=7.3.0, <7.4.0 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-12-15 11:38:00
TYPO3 is susceptible to Cross-Site Flashing
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16

2015-12-15 11:38:00
Cross-Site Scripting in TYPO3 component Indexed Search
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16

2015-12-15 11:38:00
Remote Code Execution Vulnerability
FriendsOfPHP

joomla/session

<1.3.1

2015-12-14 18:22:25
Information Disclosure
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.2

2015-12-07 00:07:13
Denial Of Service Vector
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.2

2015-12-07 00:07:13
Remote Code Execution (complement of CVE-2014-2383)
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.2

2015-12-07 00:07:13
XSS vulnerabilities in Neos
FriendsOfPHP

neos/neos

>=1.2.0, <1.2.13 · >=2.0.0, <2.0.4

2015-11-23 21:03:00
XSS vulnerabilities in Neos
FriendsOfPHP

typo3/neos

>=1.2.0, <1.2.13 · >=2.0.0, <2.0.4

2015-11-23 21:03:00
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
FriendsOfPHP

zendframework/zend-captcha

>=2.5.0, <2.5.2 · >=2.0.0, <2.4.9

2015-11-23 14:30:00
Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey
FriendsOfPHP

zendframework/zend-crypt

>=2.5.0, <2.5.2 · >=2.0.0, <2.4.9

2015-11-23 14:30:00
Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey
FriendsOfPHP

zendframework/zendframework

>=2.0.0, <2.4.9

2015-11-23 14:30:00
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
FriendsOfPHP

zendframework/zendframework

>=2.0.0, <2.4.9

2015-11-23 14:30:00
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.17

2015-11-23 14:30:00
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
FriendsOfPHP

symfony/form

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature
FriendsOfPHP

symfony/security-http

>=2.6.0, <2.6.12 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
FriendsOfPHP

symfony/security-http

>=2.6.0, <2.6.12 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature
FriendsOfPHP

symfony/security

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
FriendsOfPHP

symfony/security

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature
FriendsOfPHP

symfony/symfony

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
FriendsOfPHP

symfony/symfony

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
Arbitrary file upload and XML External Entity processing
FriendsOfPHP

typo3/flow

>=3.0.0, <3.0.1 · >=2.3.0, <2.3.7

2015-11-23 09:24:00
Arbitrary file upload and XML External Entity processing
FriendsOfPHP

neos/flow

>=3.0.0, <3.0.1 · >=2.3.0, <2.3.7

2015-11-23 09:24:00
SS-2015-027: HtmlEditor embed url sanitisation
FriendsOfPHP

silverstripe/framework

>=3.2.0, <3.2.1 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2015-11-13 10:30:00
SS-2015-026: Form field validation message XSS vulnerability
FriendsOfPHP

silverstripe/framework

>=3.1.0, <3.1.16 · >=3.2.0, <3.2.1 · >=3.0.0, <3.1.0

2015-11-11 14:31:00
Remote File Inclusion through View template name manipulation
FriendsOfPHP

cakephp/cakephp

>=3.0.0, <3.0.15 · >=2.6.0, <2.6.12 · >=2.5.0, <2.5.99 · >=2.4.0, <2.4.99 · >=2.3.0, <2.3.99 · >=2.2.0, <2.2.99 · >=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=3.1.0, <3.1.4 · >=2.7.0, <2.7.6

2015-11-05 22:08:00
Multiple CRLF injection vulnerabilities
FriendsOfPHP

phpmailer/phpmailer

>=5.0.0, <5.2.14

2015-11-01 10:15:00
XSS attack vector in Security Library method xss_clean()
FriendsOfPHP

codeigniter/framework

<3.0.3

2015-10-27 12:30:18
Filesystem Permissions Issues in Multiple Components
FriendsOfPHP

zfcampus/zf-apigility-doctrine

>=1.0.0, <1.0.3

2015-09-15 18:52:15
Filesystem Permissions Issues in Multiple Components
FriendsOfPHP

zendframework/zendframework

>=2.4.0, <2.4.8

2015-09-15 17:15:06
Filesystem Permissions Issues in Multiple Components
FriendsOfPHP

zendframework/zend-cache

>=2.5.0, <2.5.3 · >=2.4.0, <2.4.8

2015-09-15 16:24:04
« Previous Next »

Showing 5651 to 5700 of 5933 results

1 2 ... 110 111 112 113 114 115 116 117 118 119