Critical
ghsa-6fqw-j3vm-7f66
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 34
Reset filters
High
ghsa-848f-mph5-9pm9
Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability
High
ghsa-8xhv-gqm4-3w99
ZendFramework1 Potential Insufficient Entropy Vulnerability
Critical
ghsa-v42g-7q2x-cw32
Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
Critical
ghsa-2x36-qhx3-7m5f
ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select
High
ghsa-9v78-h226-2rmq
Zendframework potential security issue in login mechanism
Medium
ghsa-4vf6-mq7w-3hp6
Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed
Medium
ghsa-4v57-pwvf-x35j
Zendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`
Medium
ghsa-vvm3-rv48-j3g5
Zendframework Potential XSS or HTML Injection vector in Zend_Json
Medium
ghsa-w5mj-j45q-m638
ZendFramework1 Potential Security Issues in Bundled Dojo Library
High
ghsa-229x-22xc-2f2w
Zendframework Local file disclosure via XXE injection in Zend_XmlRpc
High
ghsa-2jx7-xg83-j2m7
Zendframework Denial of Service vector via XEE injection
Medium
ghsa-gwpm-pm6x-h7rj
ZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags`
Medium
ghsa-g52p-86j5-xr8q
ZendFramework Potential Cross-site Scripting in Development Environment Error View Script
Critical
ghsa-mhpx-3rv8-wrjm
ZendFramework potential XML eXternal Entity injection vectors
High
ghsa-4j9x-g4x8-vcmf
ZendFramework potential XML eXternal Entity injection vectors
Medium
ghsa-hg35-vqp3-fv39
ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
Critical
ghsa-qf36-fx9f-232x
ZendFramework potential SQL Injection Vector When Using PDO_MySql
Medium
ghsa-j543-vg33-g6vj
ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`
High
ghsa-hx3m-959f-v849
ZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()`
Critical
CVE-2014-8089
Zend Framework SQL injection vulnerability
Medium
CVE-2015-3154
Zenario CMS vulnerable to CRLF injection
Medium
CVE-2012-6531
Zend Framework XEE Vulnerability
Medium
CVE-2012-5657
Zend Framework XXE Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.