Advisories

Listing reported advisories sorted by their report date.

Potential CRLF injection attacks in mail and HTTP headers
FriendsOfPHP

zendframework/zend-http

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.4.0, <2.4.1 · >=2.3.0, <2.3.8

2015-05-07 08:53:42
Potential CRLF injection attacks in mail and HTTP headers
FriendsOfPHP

zendframework/zend-mail

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.4.0, <2.4.1 · >=2.3.0, <2.3.8

2015-05-07 08:53:42
Potential CRLF injection attacks in mail and HTTP headers
FriendsOfPHP

zendframework/zendframework

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.4.0, <2.4.1 · >=2.3.0, <2.3.8

2015-05-07 08:53:42
XXE Vulnerability
FriendsOfPHP

phpoffice/phpexcel

<1.8.1

2015-04-29 00:43:04
User authentication bypass
FriendsOfPHP

thelia/thelia

>=2.1.0-beta1, <2.1.3

2015-04-13 12:10:12
Unsafe methods in the Request class
FriendsOfPHP

symfony/http-foundation

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Esi Code Injection
FriendsOfPHP

symfony/http-kernel

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Esi Code Injection
FriendsOfPHP

symfony/symfony

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Unsafe methods in the Request class
FriendsOfPHP

symfony/symfony

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Critical vulnerabilities in JSON Web Token libraries
FriendsOfPHP

firebase/php-jwt

<2.0.0

2015-04-01 18:08:35
Privilege Escalation in TYPO3 Neos
FriendsOfPHP

neos/neos

>=1.2.0, <1.2.3 · >=1.1.0, <1.1.3

2015-03-28 18:26:25
Privilege Escalation in TYPO3 Neos
FriendsOfPHP

typo3/neos

>=1.2.0, <1.2.3 · >=1.1.0, <1.1.3

2015-03-28 18:26:25
SS-2015-010: XSS in Director::force_redirect()
FriendsOfPHP

silverstripe/framework

>=3.1.0, <3.1.12

2015-03-20 15:07:00
SS-2015-009: XSS In rewritten hash links
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.11 · >=3.0.0, <=3.0.12

2015-03-20 14:57:00
SS-2014-015: IE requests not properly behaving with rewritehashlinks
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.11 · >=3.0.0, <=3.0.12

2015-03-20 12:10:00
SS-2015-008: SiteTree Creation Permission Vulnerability
FriendsOfPHP

silverstripe/cms

>=3.0.0, <=3.0.11 · >=3.1.0, <3.1.11

2015-03-19 16:54:00
Invalid CSRF validation of null or incorrectly formatted token identifiers
FriendsOfPHP

zendframework/zend-validator

>=2.3.0, <2.3.6

2015-03-12 13:58:47
Invalid CSRF validation of null or incorrectly formatted token identifiers
FriendsOfPHP

zendframework/zendframework

>=2.3.0, <2.3.6

2015-03-12 13:58:47
Critical vulnerabilities in JSON Web Token libraries
FriendsOfPHP

namshi/jose

<2.2.0

2015-03-10 07:41:53
PHP object injection attack vulnerability in Slim.
FriendsOfPHP

slim/slim

<2.6.0

2015-03-01 09:13:00
XSS injection in backoffice
FriendsOfPHP

thelia/backoffice-default-template

>=2.1.0, <2.1.2

2015-02-24 17:46:34
XSS injection in backoffice
FriendsOfPHP

thelia/thelia

>=2.1.0, <2.1.2

2015-02-24 17:46:34
Attackers able to impersonate users
FriendsOfPHP

namshi/jose

>=2.1.0, <2.1.2 · >=2.0.0, <2.0.3 · >=1.2.0, <1.2.2 · <1.1.2

2015-02-19 10:59:35
Potential SQL injection in PostgreSQL Zend\Db adapter
FriendsOfPHP

zendframework/zend-db

>=2.2.0, <2.2.10 · >=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.5

2015-02-18 19:15:09
Potential SQL injection in PostgreSQL Zend\Db adapter
FriendsOfPHP

zendframework/zendframework

>=2.2.0, <2.2.10 · >=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.5

2015-02-18 19:15:09
SS-2015-004: TreeDropdownField and TreeMultiSelectField XSS
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.9

2015-02-12 15:55:00
SS-2015-006: XSS In GridField print
FriendsOfPHP

silverstripe/framework

>=3.1.0, <3.1.10

2015-02-12 15:55:00
SS-2015-007: XSS In FormAction
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.9

2015-02-12 15:55:00
SS-2015-003: History XSS Vulnerability
FriendsOfPHP

silverstripe/cms

>=3.1.0, <=3.1.9

2015-02-12 15:55:00
SS-2015-005: VirtualPage XSS
FriendsOfPHP

silverstripe/cms

>=3.1.0, <=3.1.9

2015-02-12 15:55:00
A directory traversal vulnerability allows back end users to view files outside their document root
FriendsOfPHP

contao/core

>=3.0.0, <3.4.4 · >=2.0.0, <3.0.0

2015-02-12 13:44:11
XSS vulnerability in login redirect param
FriendsOfPHP

socalnick/scn-social-auth

<1.15.2

2015-01-16 06:44:44
Session validation vulnerability
FriendsOfPHP

zendframework/zend-session

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.4 · >=2.2.0, <2.2.9

2015-01-14 22:00:00
Session validation vulnerability
FriendsOfPHP

zendframework/zendframework

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.4 · >=2.2.0, <2.2.9

2015-01-14 22:00:00
XSS vulnerability in login redirect param
FriendsOfPHP

zf-commons/zfc-user

<1.2.2

2015-01-08 14:18:45
Header injection in NativeMailerHandler
FriendsOfPHP

monolog/monolog

>=1.8.0, <1.12.0

2014-12-29 13:23:35
Possible cache poisining on the homepage when anchors are used
FriendsOfPHP

typo3/cms

>=7.0.0, <7.0.2 · >=6.2.0, <6.2.9

2014-12-10 10:08:02
Possible link spoofing on the homepage when anchors are used
FriendsOfPHP

typo3/cms

>=7.0.0, <7.0.2 · >=6.2.0, <6.2.9

2014-12-10 10:08:02
Denial of Service in OpenID System Extension
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.6

2014-10-22 09:14:28
Arbitrary Shell Execution in Swiftmailer library
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.6

2014-10-22 09:14:25
SQL injection vector when manually quoting values for sqlsrv extension, using null byte
FriendsOfPHP

zendframework/zend-db

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.8

2014-09-16 22:00:00
Anonymous authentication in ldap_bind() function of PHP, using null byte
FriendsOfPHP

zendframework/zend-ldap

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.8

2014-09-16 22:00:00
Anonymous authentication in ldap_bind() function of PHP, using null byte
FriendsOfPHP

zendframework/zendframework

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.8

2014-09-16 22:00:00
SQL injection vector when manually quoting values for sqlsrv extension, using null byte
FriendsOfPHP

zendframework/zendframework

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.8

2014-09-16 22:00:00
Anonymous authentication in ldap_bind() function of PHP, using null byte
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.9

2014-09-16 22:00:00
SQL injection vector when manually quoting values for sqlsrv extension, using null byte
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.9

2014-09-16 22:00:00
Potential XXE security issue
FriendsOfPHP

james-heinrich/getid3

<1.9.9

2014-09-14 18:13:30
Entropy is lost in the TokenGenerator
FriendsOfPHP

friendsofsymfony/user-bundle

>=1.3.0, <1.3.5 · >=1.2.0, <1.3.0

2014-09-04 12:28:43
CSRF vulnerability in the Web Profiler
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:30
CSRF vulnerability in the Web Profiler
FriendsOfPHP

symfony/web-profiler-bundle

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:30
« Previous Next »

Showing 5751 to 5800 of 5932 results

1 2 ... 110 111 112 113 114 115 116 117 118 119