Medium
ghsa-4v57-pwvf-x35j
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filters
High
ghsa-cg8w-5jrc-675g
Zend-HTTP URL Rewrite vulnerability
Medium
ghsa-w5mj-j45q-m638
ZendFramework1 Potential Security Issues in Bundled Dojo Library
Critical
ghsa-8x2v-pcg7-94f4
Zend-JSON vulnerable to XXE/XEE attacks
High
ghsa-2jx7-xg83-j2m7
Zendframework Denial of Service vector via XEE injection
Medium
ghsa-gwpm-pm6x-h7rj
ZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags`
Medium
ghsa-96c6-m98x-hxjx
Zend-Session session validation vulnerability
Medium
ghsa-g52p-86j5-xr8q
ZendFramework Potential Cross-site Scripting in Development Environment Error View Script
High
ghsa-cxf7-m5g2-v594
Zend-Mail remote code execution in zend-mail via Sendmail adapter
Critical
ghsa-mhpx-3rv8-wrjm
ZendFramework potential XML eXternal Entity injection vectors
High
ghsa-4j9x-g4x8-vcmf
ZendFramework potential XML eXternal Entity injection vectors
Medium
ghsa-hg35-vqp3-fv39
ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
Critical
ghsa-qf36-fx9f-232x
ZendFramework potential SQL Injection Vector When Using PDO_MySql
Critical
ghsa-f4fj-q6m4-cc52
ZendFramework vulnerable to XXE/XEE attacks
High
ghsa-hx3m-959f-v849
ZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()`
Medium
ghsa-fh7r-58q4-6387
Zendframework URL Rewrite vulnerability
Medium
ghsa-5gmf-3c43-q73v
ZendFramework vulnerable to Cross-site Scripting
Medium
ghsa-gff2-p6vm-3p8g
ZendFramework potential remote code execution in zend-mail via Sendmail adapter
High
ghsa-x2f4-8wxf-w3vf
ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations
Critical
ghsa-qc7w-4567-84wv
Zendframework vulnerable to XXE/XEE attacks
High
ghsa-xg9w-r469-m455
ZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilities
Medium
ghsa-62f6-h68r-3jpw
Zendframework session validation vulnerability
High
ghsa-jq87-2wxp-8349
ZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`
High
ghsa-xffp-6w68-4775
Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.