Advisories via FriendsOfPHP

Listing reported advisories via FriendsOfPHP sorted by their report date.

Critical SQL injection bug in the ODBC database driver
FriendsOfPHP

codeigniter/framework

<=3.0.6

2015-07-26 19:42:05
Security Misconfiguration Vulnerability in the AWS SDK for PHP
FriendsOfPHP

aws/aws-sdk-php

>=3.0.0, <3.2.1

2015-07-24 00:41:41
Insecure state generation
FriendsOfPHP

laravel/socialite

>=1.0.0, <1.0.99 · >=2.0.0, <2.0.9

2015-07-23 13:53:00
HTTP Proxy header vulnerability
FriendsOfPHP

guzzlehttp/guzzle

>=4.0.0-rc2, <4.2.4 · >=6, <6.2.1 · >=5, <5.3.1

2015-07-15 19:28:39
class yii\web\ViewAction allowed to include arbitrary files that end with .php
FriendsOfPHP

yiisoft/yii2

<2.0.5

2015-07-10 18:12:53
class yii\web\ViewAction allowed to include arbitrary files that end with .php
FriendsOfPHP

yiisoft/yii2-dev

<2.0.5

2015-07-10 18:12:53
Forced Redirect to External Website
FriendsOfPHP

oro/crm

>=1.7.0, <1.7.4

2015-07-08 13:51:00
Forced Redirect to External Website
FriendsOfPHP

oro/platform

>=1.7.0, <1.7.4

2015-07-08 13:47:00
Cross-Site Scripting in 3rd party library Flowplayer
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.14 · >=7.3.0, <7.3.1 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-07-01 14:23:00
Frontend login Session Fixation
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.14 · >=7.3.0, <7.3.1 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-07-01 14:20:00
Cross-Site Scripting exploitable by Editors
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.14 · >=7.3.0, <7.3.1 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-07-01 14:20:00
Information Disclosure possibility exploitable by Editors
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.14 · >=7.3.0, <7.3.1 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-07-01 14:20:00
Brute Force Protection Bypass in backend login
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.14 · >=7.3.0, <7.3.1 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-07-01 14:20:00
Access bypass when editing file metadata
FriendsOfPHP

typo3/cms

>=6.2.0, <6.2.14 · >=7.3.0, <7.3.1 · >=7.2.0, <7.3.0 · >=7.1.0, <7.2.0 · >=7.0.0, <7.1.0

2015-07-01 14:16:00
Potential XSS and Open Redirect vectors in zend-diactoros
FriendsOfPHP

zendframework/zend-diactoros

>=1.0.0, <1.0.4

2015-06-23 15:55:00
SS-2015-013: X-Forwarded-Host request hostname injection
FriendsOfPHP

silverstripe/framework

>=3.1.0, <3.1.13

2015-05-29 00:53:14
SS-2015-014: Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation
FriendsOfPHP

silverstripe/framework

>=3.0.0, <=3.0.13 · >=3.1.0, <3.1.13

2015-05-28 13:05:00
Denial of Service attack through XML payloads
FriendsOfPHP

cakephp/cakephp

>=2.5.0, <2.5.90 · >=2.4.0, <2.4.99 · >=2.3.0, <2.3.99 · >=2.2.0, <2.2.99 · >=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=3.0.0, <3.0.6 · >=2.6.0, <2.6.6

2015-05-28 11:30:00
CVE-2015-4050: ESI unauthorized access
FriendsOfPHP

symfony/http-kernel

>=2.3.19, <2.3.29 · >=2.5.4, <2.5.12 · >=2.6.0, <2.6.8 · >=2.4.9, <2.5.0

2015-05-26 23:55:51
CVE-2015-4050: ESI unauthorized access
FriendsOfPHP

symfony/symfony

>=2.3.19, <2.3.29 · >=2.5.4, <2.5.12 · >=2.6.0, <2.6.8 · >=2.4.9, <2.5.0

2015-05-26 23:55:51
SS-2015-012: External redirection risk in Security?ReturnURL
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.12 · >=3.0.0, <=3.0.13

2015-05-25 14:52:00
SS-2015-011: Potential SQL Injection Vulnerability
FriendsOfPHP

silverstripe/framework

>=3.0.0, <=3.0.13 · >=3.1.0, <3.1.13

2015-05-25 10:52:00
Potential CRLF injection attacks in mail and HTTP headers
FriendsOfPHP

zendframework/zendframework1

>=1.12.0, <1.12.12

2015-05-19 17:40:42
Exploit in the private channel authentication
FriendsOfPHP

pusher/pusher-php-server

<2.2.1

2015-05-13 10:53:19
JSON Data encoded for use in HTML was not safe to use in IE6/IE7, possible XSS attacks
FriendsOfPHP

yiisoft/yii2-jui

<2.0.4

2015-05-10 03:58:01
JSON Data encoded for use in HTML was not safe to use in IE6/IE7, possible XSS attacks
FriendsOfPHP

yiisoft/yii2-bootstrap

<2.0.4

2015-05-10 03:43:16
JSON Data encoded for use in HTML was not safe to use in IE6/IE7, possible XSS attacks
FriendsOfPHP

yiisoft/yii2-gii

<2.0.4

2015-05-10 03:41:39
JSON Data encoded for use in HTML was not safe to use in IE6/IE7, possible XSS attacks
FriendsOfPHP

yiisoft/yii2

<2.0.4

2015-05-10 03:38:17
JSON Data encoded for use in HTML was not safe to use in IE6/IE7, possible XSS attacks
FriendsOfPHP

yiisoft/yii2-dev

<2.0.4

2015-05-10 03:38:17
Incorrect CSRF validation
FriendsOfPHP

cakephp/cakephp

>=3.0.0, <3.0.4

2015-05-07 11:30:00
Potential CRLF injection attacks in mail and HTTP headers
FriendsOfPHP

zendframework/zend-http

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.4.0, <2.4.1 · >=2.3.0, <2.3.8

2015-05-07 08:53:42
Potential CRLF injection attacks in mail and HTTP headers
FriendsOfPHP

zendframework/zend-mail

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.4.0, <2.4.1 · >=2.3.0, <2.3.8

2015-05-07 08:53:42
Potential CRLF injection attacks in mail and HTTP headers
FriendsOfPHP

zendframework/zendframework

>=2.1.0, <2.1.99 · >=2.0.0, <2.0.99 · >=2.4.0, <2.4.1 · >=2.3.0, <2.3.8

2015-05-07 08:53:42
XXE Vulnerability
FriendsOfPHP

phpoffice/phpexcel

<1.8.1

2015-04-29 00:43:04
User authentication bypass
FriendsOfPHP

thelia/thelia

>=2.1.0-beta1, <2.1.3

2015-04-13 12:10:12
Unsafe methods in the Request class
FriendsOfPHP

symfony/http-foundation

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Esi Code Injection
FriendsOfPHP

symfony/http-kernel

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Esi Code Injection
FriendsOfPHP

symfony/symfony

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Unsafe methods in the Request class
FriendsOfPHP

symfony/symfony

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Critical vulnerabilities in JSON Web Token libraries
FriendsOfPHP

firebase/php-jwt

<2.0.0

2015-04-01 18:08:35
Privilege Escalation in TYPO3 Neos
FriendsOfPHP

neos/neos

>=1.2.0, <1.2.3 · >=1.1.0, <1.1.3

2015-03-28 18:26:25
Privilege Escalation in TYPO3 Neos
FriendsOfPHP

typo3/neos

>=1.2.0, <1.2.3 · >=1.1.0, <1.1.3

2015-03-28 18:26:25
SS-2015-010: XSS in Director::force_redirect()
FriendsOfPHP

silverstripe/framework

>=3.1.0, <3.1.12

2015-03-20 15:07:00
SS-2015-009: XSS In rewritten hash links
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.11 · >=3.0.0, <=3.0.12

2015-03-20 14:57:00
SS-2014-015: IE requests not properly behaving with rewritehashlinks
FriendsOfPHP

silverstripe/framework

>=3.1.0, <=3.1.11 · >=3.0.0, <=3.0.12

2015-03-20 12:10:00
SS-2015-008: SiteTree Creation Permission Vulnerability
FriendsOfPHP

silverstripe/cms

>=3.0.0, <=3.0.11 · >=3.1.0, <3.1.11

2015-03-19 16:54:00
Invalid CSRF validation of null or incorrectly formatted token identifiers
FriendsOfPHP

zendframework/zend-validator

>=2.3.0, <2.3.6

2015-03-12 13:58:47
Invalid CSRF validation of null or incorrectly formatted token identifiers
FriendsOfPHP

zendframework/zendframework

>=2.3.0, <2.3.6

2015-03-12 13:58:47
Critical vulnerabilities in JSON Web Token libraries
FriendsOfPHP

namshi/jose

<2.2.0

2015-03-10 07:41:53
PHP object injection attack vulnerability in Slim.
FriendsOfPHP

slim/slim

<2.6.0

2015-03-01 09:13:00
« Previous Next »

Showing 1151 to 1200 of 1362 results

1 2 ... 19 20 21 22 23 24 25 26 27 28