Rezultati pretraživanja za 'Proizvođač: zend'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-29312 | 9.8 | An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that | 2026-07-09 01:16:44 | 2023-04-04 15:15:08 |
| CVE-2024-4336 | 7.6 | Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/tables/add, in multiple parameters. An attacker could retrieve the session details of | 2025-10-15 14:16:48 | 2024-04-30 10:15:07 |
| CVE-2024-4337 | 7.6 | Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/nav/add, in multiple parameters. This vulnerability allows an attacker to retrieve the | 2025-10-15 14:13:23 | 2024-04-30 10:15:08 |
| CVE-2024-53277 | 5.4 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages | 2025-09-04 17:13:28 | 2025-01-14 23:15:08 |
| CVE-2025-30148 | 5.4 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the CMS could send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript | 2025-09-04 17:13:05 | 2025-04-10 13:15:51 |
| CVE-2024-32981 | 5.4 | Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS could add send a specifically crafted encoded payload to the server, which could be used to | 2025-09-04 15:21:25 | 2024-07-17 20:15:05 |
| CVE-2025-27515 | 9.8 | Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12. | 2025-08-26 17:13:57 | 2025-03-05 19:15:39 |
| CVE-2024-52301 | 7.5 | Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The | 2025-08-26 02:37:14 | 2024-11-12 20:15:14 |
| CVE-2022-40482 | 5.3 | The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing attacks with HTTP/2 multiplexing. This is caused by the early return inside the hasValidCredentials method in t | 2025-05-30 19:06:45 | 2023-04-25 19:15:10 |
| CVE-2022-38148 | 8.8 | Silverstripe silverstripe/framework through 4.11 allows SQL Injection. | 2025-04-30 16:15:22 | 2022-11-21 16:15:13 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: