Advisories for packages from symfony

Listing reported advisories for packages from symfony sorted by their report date.

CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
FriendsOfPHP

symfony/security

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature
FriendsOfPHP

symfony/security-http

>=2.6.0, <2.6.12 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
FriendsOfPHP

symfony/security-http

>=2.6.0, <2.6.12 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature
FriendsOfPHP

symfony/symfony

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
FriendsOfPHP

symfony/symfony

>=2.6.0, <2.6.12 · >=2.3.0, <2.3.35 · >=2.7.0, <2.7.7 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0

2015-11-23 12:58:37
CVE-2015-4050: ESI unauthorized access
FriendsOfPHP

symfony/http-kernel

>=2.3.19, <2.3.29 · >=2.5.4, <2.5.12 · >=2.6.0, <2.6.8 · >=2.4.9, <2.5.0

2015-05-26 23:55:51
CVE-2015-4050: ESI unauthorized access
FriendsOfPHP

symfony/symfony

>=2.3.19, <2.3.29 · >=2.5.4, <2.5.12 · >=2.6.0, <2.6.8 · >=2.4.9, <2.5.0

2015-05-26 23:55:51
Unsafe methods in the Request class
FriendsOfPHP

symfony/http-foundation

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Esi Code Injection
FriendsOfPHP

symfony/http-kernel

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Esi Code Injection
FriendsOfPHP

symfony/symfony

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
Unsafe methods in the Request class
FriendsOfPHP

symfony/symfony

>=2.5.0, <2.5.11 · >=2.3.0, <2.3.27 · >=2.6.0, <2.6.6 · >=2.4.0, <2.5.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2015-04-01 18:55:26
CSRF vulnerability in the Web Profiler
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:30
CSRF vulnerability in the Web Profiler
FriendsOfPHP

symfony/web-profiler-bundle

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:30
Direct access of ESI URLs behind a trusted proxy
FriendsOfPHP

symfony/http-kernel

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:02
Direct access of ESI URLs behind a trusted proxy
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:40:02
Security issue when parsing the Authorization header
FriendsOfPHP

symfony/http-foundation

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:38:23
Security issue when parsing the Authorization header
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:38:23
Denial of service with a malicious HTTP Host header
FriendsOfPHP

symfony/http-foundation

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:37:21
Denial of service with a malicious HTTP Host header
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-09-03 07:37:21
Code injection in the way Symfony implements translation caching in FrameworkBundle
FriendsOfPHP

symfony/symfony

>=2.3.0, <2.3.19 · >=2.5.0, <2.5.4 · >=2.4.0, <2.4.9 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-07-25 22:18:02
Code injection in the way Symfony implements translation caching in FrameworkBundle
FriendsOfPHP

symfony/framework-bundle

>=2.3.0, <2.3.18 · >=2.5.0, <2.5.2 · >=2.4.0, <2.4.8 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2014-07-15 15:35:51
Possible DOS attack with long user-submitted passwords
FriendsOfPHP

symfony/security

>=2.1.0, <2.1.13 · >=2.0.0, <2.0.25 · >=2.3.0, <2.3.6 · >=2.2.0, <2.2.9

2013-10-10 08:30:51
Possible DOS attack with long user-submitted passwords
FriendsOfPHP

symfony/symfony

>=2.1.0, <2.1.13 · >=2.0.0, <2.0.25 · >=2.3.0, <2.3.6 · >=2.2.0, <2.2.9

2013-10-10 08:30:51
Request::getHost() poisoning
FriendsOfPHP

symfony/http-foundation

>=2.1.0, <2.1.12 · >=2.0.0, <2.0.24 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.5

2013-08-17 16:01:36
Request::getHost() poisoning
FriendsOfPHP

symfony/symfony

>=2.1.0, <2.1.12 · >=2.0.0, <2.0.24 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.5

2013-08-17 16:01:36
Validation metadata serialization and loss of information
FriendsOfPHP

symfony/symfony

>=2.1.0, <2.1.12 · >=2.0.0, <2.0.24 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.5

2013-08-17 07:59:49
Validation metadata serialization and loss of information
FriendsOfPHP

symfony/validator

>=2.1.0, <2.1.12 · >=2.0.0, <2.0.24 · >=2.3.0, <2.3.3 · >=2.2.0, <2.2.5

2013-08-17 07:59:49
Ability to enable/disable object support in YAML parsing and dumping
FriendsOfPHP

symfony/symfony

>=2.0.0, <2.0.22 · >=2.1.0, <2.1.7

2013-01-15 21:21:51
Ability to enable/disable object support in YAML parsing and dumping
FriendsOfPHP

symfony/yaml

>=2.0.0, <2.0.22 · >=2.1.0, <2.1.7

2013-01-15 21:21:51
Ability to enable/disable PHP parsing in Yaml::parse()
FriendsOfPHP

symfony/symfony

>=2.0.0, <2.0.22

2013-01-15 21:16:19
Ability to enable/disable PHP parsing in Yaml::parse()
FriendsOfPHP

symfony/yaml

>=2.0.0, <2.0.22

2013-01-15 21:16:19
Code execution vulnerability via the "internal" routes
FriendsOfPHP

symfony/symfony

>=2.0.0, <2.0.20 · >=2.1.0, <2.1.5

2012-12-19 09:59:52
Request::getClientIp() when the trust proxy mode is enabled
FriendsOfPHP

symfony/http-foundation

>=2.0.0, <2.0.19 · >=2.1.0, <2.1.4

2012-11-27 22:21:23
Request::getClientIp() when the trust proxy mode is enabled
FriendsOfPHP

symfony/symfony

>=2.0.0, <2.0.19 · >=2.1.0, <2.1.4

2012-11-27 19:09:41
Vulnerability in the EntityUserProvider as provided in the Doctrine bridge
FriendsOfPHP

symfony/symfony

>=2.0.0, <2.0.6

2012-11-08 08:33:49
Security fixes related to the way XML is handled
FriendsOfPHP

symfony/dependency-injection

>=2.0.0, <2.0.17

2012-08-27 19:17:44
Security fixes related to the way XML is handled
FriendsOfPHP

symfony/routing

>=2.0.0, <2.0.17

2012-08-27 19:17:44
Security fixes related to the way XML is handled
FriendsOfPHP

symfony/symfony

>=2.0.0, <2.0.17

2012-08-27 19:17:44
Security fixes related to the way XML is handled
FriendsOfPHP

symfony/translation

>=2.0.0, <2.0.17

2012-08-27 19:17:44
Security fixes related to the way XML is handled
FriendsOfPHP

symfony/validator

>=2.0.0, <2.0.17

2012-08-27 19:17:44
Routes behind a firewall are accessible even when not logged in
FriendsOfPHP

symfony/http-foundation

>=2.0.0, <2.0.19

2012-03-19 15:59:52
Routes behind a firewall are accessible even when not logged in
FriendsOfPHP

symfony/routing

>=2.0.0, <2.0.19

2012-03-19 15:59:52
Routes behind a firewall are accessible even when not logged in
FriendsOfPHP

symfony/security

>=2.0.0, <2.0.19

2012-03-19 15:59:52
Routes behind a firewall are accessible even when not logged in
FriendsOfPHP

symfony/symfony

>=2.0.0, <2.0.19

2012-03-19 15:59:52
XML decoding attack vector through external entities
FriendsOfPHP

symfony/serializer

>=2.0.0, <2.0.11

2012-02-24 13:26:13
XML decoding attack vector through external entities
FriendsOfPHP

symfony/symfony

>=2.0.0, <2.0.11

2012-02-24 13:26:13
« Previous Next »

Showing 201 to 246 of 246 results

1 2 3 4 5