Rezultati pretraživanja za 'Proizvođač: zend'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2012-5382 | 6.0 | Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Zend\ZendServer\share\ZendFrame | 2024-08-06 21:16:00 | 2012-10-11 10:51:57 |
| CVE-2021-3007 | 7.5 | Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class i | 2024-08-03 17:15:35 | 2021-01-04 03:15:13 |
| CVE-2019-9081 | - | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none | 2023-11-07 03:13:00 | 2019-02-24 17:29:00 |
| CVE-2016-6233 | 7.5 | The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use of the character pattern [\w]* in a regular expression. | 2023-11-07 02:33:00 | 2017-02-17 02:59:00 |
| CVE-2016-4861 | 7.5 | The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation. | 2023-11-07 02:32:00 | 2017-02-17 02:59:00 |
| CVE-2015-5723 | 7.2 | Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permiss | 2023-11-07 02:26:00 | 2016-06-07 14:06:00 |
| CVE-2020-7991 | 6.8 | Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password. | 2023-01-31 21:04:00 | 2020-01-26 22:15:00 |
| CVE-2022-4414 | 6.1 | Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13. | 2022-12-13 14:31:00 | 2022-12-12 00:15:00 |
| CVE-2022-4413 | - | Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13. | 2022-12-12 00:33:00 | 2022-12-12 00:15:00 |
| CVE-2021-43808 | 4.3 | Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting (XSS) vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to anoth | 2022-08-09 13:17:00 | 2021-12-08 00:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: