Advisories

Listing reported advisories sorted by their report date.

SS-2016-002: CSRF vulnerability in GridFieldAddExistingAutocompleter
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.16 · >=3.2.0, <=3.2.1 · >3.2, <3.3.0

2016-02-17 17:50:00
SQL Injection in dbal
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.18

2016-02-16 12:32:00
Cross-Site Scripting in link validator component
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.18 · >=7.6.0, <7.6.3

2016-02-16 12:32:00
Cross-Site Scripting in legacy form component
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.18

2016-02-16 12:32:00
Cross-Site Scripting in form component
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.18

2016-02-16 12:32:00
File upload access bypass and denial of service
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Brute force amplification attacks via XML-RPC
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via path manipulation
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Form API ignores access restrictions on submit buttons
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
HTTP header injection using line breaks
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via double-encoded 'destination' parameter
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Reflected file download vulnerability
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Saving user accounts can sometimes grant the user all roles
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Email address can be matched to an account
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Session data truncation can lead to unserialization of user provided data
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
File upload access bypass and denial of service
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Brute force amplification attacks via XML-RPC
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via path manipulation
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Form API ignores access restrictions on submit buttons
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
HTTP header injection using line breaks
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via double-encoded 'destination' parameter
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Reflected file download vulnerability
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Saving user accounts can sometimes grant the user all roles
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Email address can be matched to an account
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Session data truncation can lead to unserialization of user provided data
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Composer Cache Injection vulnerability
FriendsOfPHP

composer/composer

<=1.0.0-alpha11

2016-02-10 14:51:23
CVE-2016-1902: SecureRandom's fallback not secure when OpenSSL fails
FriendsOfPHP

symfony/security-core

>=2.6.0, <2.6.13 · >=2.7.0, <2.7.9 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2016-01-14 10:07:40
CVE-2016-1902: SecureRandom's fallback not secure when OpenSSL fails
FriendsOfPHP

symfony/security

>=2.6.0, <2.6.13 · >=2.3.0, <2.3.37 · >=2.7.0, <2.7.9 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2016-01-14 10:07:40
CVE-2016-1902: SecureRandom's fallback not secure when OpenSSL fails
FriendsOfPHP

symfony/symfony

>=2.6.0, <2.6.13 · >=2.3.0, <2.3.37 · >=2.7.0, <2.7.9 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2016-01-14 10:07:40
Local File Disclosure
FriendsOfPHP

phpmailer/phpmailer

>=5.0.0, <5.2.22

2016-01-06 21:35:04
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16 · >=7.6.0, <7.6.1 · >=7.5.0, <7.6.0 · >=7.4.0, <7.5.0 · >=7.3.0, <7.4.0 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-12-15 11:38:00
Cross-Site Scripting vulnerability in typolinks
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16 · >=7.6.0, <7.6.1 · >=7.5.0, <7.6.0 · >=7.4.0, <7.5.0 · >=7.3.0, <7.4.0 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-12-15 11:38:00
Multiple Cross-Site Scripting vulnerabilities in frontend
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16 · >=7.6.0, <7.6.1 · >=7.5.0, <7.6.0 · >=7.4.0, <7.5.0 · >=7.3.0, <7.4.0 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-12-15 11:38:00
TYPO3 is susceptible to Cross-Site Flashing
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16

2015-12-15 11:38:00
Cross-Site Scripting in TYPO3 component Indexed Search
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16

2015-12-15 11:38:00
Remote Code Execution Vulnerability
FriendsOfPHP

joomla/session

<1.3.1

2015-12-14 18:22:25
Information Disclosure
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.2

2015-12-07 00:07:13
Denial Of Service Vector
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.2

2015-12-07 00:07:13
Remote Code Execution (complement of CVE-2014-2383)
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.2

2015-12-07 00:07:13
XSS vulnerabilities in Neos
FriendsOfPHP

neos/neos

>=1.2.0, <1.2.13 · >=2.0.0, <2.0.4

2015-11-23 21:03:00
XSS vulnerabilities in Neos
FriendsOfPHP

typo3/neos

>=1.2.0, <1.2.13 · >=2.0.0, <2.0.4

2015-11-23 21:03:00
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
FriendsOfPHP

zendframework/zend-captcha

>=2.5.0, <2.5.2 · >=2.0.0, <2.4.9

2015-11-23 14:30:00
Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey
FriendsOfPHP

zendframework/zend-crypt

>=2.5.0, <2.5.2 · >=2.0.0, <2.4.9

2015-11-23 14:30:00
Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey
FriendsOfPHP

zendframework/zendframework

>=2.0.0, <2.4.9

2015-11-23 14:30:00
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
FriendsOfPHP

zendframework/zendframework

>=2.0.0, <2.4.9

2015-11-23 14:30:00
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.17

2015-11-23 14:30:00
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
FriendsOfPHP

symfony/form

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature
FriendsOfPHP

symfony/security-http

>=2.6.0, <2.6.12 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
FriendsOfPHP

symfony/security-http

>=2.6.0, <2.6.12 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature
FriendsOfPHP

symfony/security

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
« Previous Next »

Showing 5801 to 5850 of 6096 results

1 2 ... 113 114 115 116 117 118 119 120 121 122