Advisories via FriendsOfPHP

Listing reported advisories via FriendsOfPHP sorted by their report date.

Information leakage issue in the sanitycheck module
FriendsOfPHP

simplesamlphp/simplesamlphp

<1.14.1

2016-03-07 13:04:57
XML External Entity (XXE) Processing in TYPO3 Core
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.19 · >=7.6.0, <7.6.4

2016-02-23 12:28:00
Cross-Site Scripting in TYPO3 component Backend
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.19

2016-02-23 12:28:00
Cross-Site Scripting in TYPO3 component CSS styled content
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.19 · >=7.6.0, <7.6.4

2016-02-23 12:28:00
Denial of Service attack possibility in TYPO3 component Indexed Search
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.19 · >=7.6.0, <7.6.4

2016-02-23 12:28:00
SS-2016-003: Hostname, IP and Protocol Spoofing through HTTP Headers
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.16 · >=3.2.0, <=3.2.1 · >3.2, <3.3.0

2016-02-18 11:05:00
SS-2015-028: Missing security check on dev/build/defaults
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.16 · >=3.2.0, <=3.2.1 · >3.2, <3.3.0

2016-02-17 17:55:00
SS-2016-002: CSRF vulnerability in GridFieldAddExistingAutocompleter
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.16 · >=3.2.0, <=3.2.1 · >3.2, <3.3.0

2016-02-17 17:50:00
SQL Injection in dbal
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.18

2016-02-16 12:32:00
Cross-Site Scripting in link validator component
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.18 · >=7.6.0, <7.6.3

2016-02-16 12:32:00
Cross-Site Scripting in legacy form component
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.18

2016-02-16 12:32:00
Cross-Site Scripting in form component
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.18

2016-02-16 12:32:00
File upload access bypass and denial of service
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Brute force amplification attacks via XML-RPC
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via path manipulation
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Form API ignores access restrictions on submit buttons
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
HTTP header injection using line breaks
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via double-encoded 'destination' parameter
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Reflected file download vulnerability
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Saving user accounts can sometimes grant the user all roles
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Email address can be matched to an account
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
Session data truncation can lead to unserialization of user provided data
FriendsOfPHP

drupal/core

>=8.0, <8.0.4

2016-02-15 18:57:00
File upload access bypass and denial of service
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Brute force amplification attacks via XML-RPC
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via path manipulation
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Form API ignores access restrictions on submit buttons
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
HTTP header injection using line breaks
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Open redirect via double-encoded 'destination' parameter
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Reflected file download vulnerability
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Saving user accounts can sometimes grant the user all roles
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Email address can be matched to an account
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Session data truncation can lead to unserialization of user provided data
FriendsOfPHP

drupal/drupal

>=8.0, <8.0.4

2016-02-15 18:57:00
Composer Cache Injection vulnerability
FriendsOfPHP

composer/composer

<=1.0.0-alpha11

2016-02-10 14:51:23
CVE-2016-1902: SecureRandom's fallback not secure when OpenSSL fails
FriendsOfPHP

symfony/security-core

>=2.6.0, <2.6.13 · >=2.7.0, <2.7.9 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2016-01-14 10:07:40
CVE-2016-1902: SecureRandom's fallback not secure when OpenSSL fails
FriendsOfPHP

symfony/security

>=2.6.0, <2.6.13 · >=2.3.0, <2.3.37 · >=2.7.0, <2.7.9 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2016-01-14 10:07:40
CVE-2016-1902: SecureRandom's fallback not secure when OpenSSL fails
FriendsOfPHP

symfony/symfony

>=2.6.0, <2.6.13 · >=2.3.0, <2.3.37 · >=2.7.0, <2.7.9 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2016-01-14 10:07:40
Local File Disclosure
FriendsOfPHP

phpmailer/phpmailer

>=5.0.0, <5.2.22

2016-01-06 21:35:04
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16 · >=7.6.0, <7.6.1 · >=7.5.0, <7.6.0 · >=7.4.0, <7.5.0 · >=7.3.0, <7.4.0 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-12-15 11:38:00
Cross-Site Scripting vulnerability in typolinks
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16 · >=7.6.0, <7.6.1 · >=7.5.0, <7.6.0 · >=7.4.0, <7.5.0 · >=7.3.0, <7.4.0 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-12-15 11:38:00
Multiple Cross-Site Scripting vulnerabilities in frontend
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16 · >=7.6.0, <7.6.1 · >=7.5.0, <7.6.0 · >=7.4.0, <7.5.0 · >=7.3.0, <7.4.0 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-12-15 11:38:00
TYPO3 is susceptible to Cross-Site Flashing
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16

2015-12-15 11:38:00
Cross-Site Scripting in TYPO3 component Indexed Search
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.16

2015-12-15 11:38:00
Remote Code Execution Vulnerability
FriendsOfPHP

joomla/session

<1.3.1

2015-12-14 18:22:25
Information Disclosure
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.2

2015-12-07 00:07:13
Denial Of Service Vector
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.2

2015-12-07 00:07:13
Remote Code Execution (complement of CVE-2014-2383)
FriendsOfPHP

dompdf/dompdf

>=0.6, <0.6.2

2015-12-07 00:07:13
XSS vulnerabilities in Neos
FriendsOfPHP

neos/neos

>=1.2.0, <1.2.13 · >=2.0.0, <2.0.4

2015-11-23 21:03:00
XSS vulnerabilities in Neos
FriendsOfPHP

typo3/neos

>=1.2.0, <1.2.13 · >=2.0.0, <2.0.4

2015-11-23 21:03:00
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.17

2015-11-23 14:30:00
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
FriendsOfPHP

zendframework/zendframework

>=2.0.0, <2.4.9

2015-11-23 14:30:00
« Previous Next »

Showing 1051 to 1100 of 1353 results

1 2 ... 19 20 21 22 23 24 25 26 27 28