Rezultati pretraživanja za 'Proizvođač: zend'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2685 | 7.5 | The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before 1.12.4 violate the OpenID 2.0 protocol by ensuring only that at least one field is signed, which allows remot | 2017-11-04 01:29:00 | 2014-09-04 17:55:00 |
| CVE-2015-3257 | 4.3 | Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks. | 2017-08-29 16:45:00 | 2017-08-25 18:29:00 |
| CVE-2015-1555 | 6.4 | Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators. | 2017-08-15 16:04:00 | 2017-08-07 17:29:00 |
| CVE-2007-6018 | 5.8 | IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) | 2017-07-29 01:33:00 | 2008-01-11 02:46:00 |
| CVE-2007-1370 | 6.2 | Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files. NOTE: this only occurs when safe_mode and open_basedir are disabled; other settings | 2017-07-29 01:30:00 | 2007-03-09 22:19:00 |
| CVE-2007-1369 | 4.4 | ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the | 2017-07-29 01:30:00 | 2007-03-09 22:19:00 |
| CVE-2015-1786 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers. | 2017-06-15 13:08:00 | 2017-06-08 21:29:00 |
| CVE-2015-5161 | 6.8 | The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML e | 2016-12-24 02:59:00 | 2015-08-25 17:59:00 |
| CVE-2015-7695 | 7.5 | The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query. | 2016-11-28 19:44:00 | 2016-06-07 14:06:00 |
| CVE-2013-6808 | 4.3 | Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php. | 2013-12-30 16:14:00 | 2013-12-28 04:53:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: