| Zend Access Restriction BypassCVE-2014-8088 · GHSA-F6RC-RH43-H8GRVersion ranges need review. |
zendframework/zend-ldapzendframework/zendframework1 |
Composer |
Medium
|
Fix reported |
|
| Zendframework has potential Cross-site Scripting vector in multiple view helpersGHSA-8Q77-CV62-JJ38 · PKSA-FV1V-D4T3-XH7WVersion ranges need review. |
zendframework/zendframework |
Composer |
Medium
|
Fix reported |
|
| Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`GHSA-XFFP-6W68-4775 · PKSA-5JBD-WVKT-7QNPVersion ranges need review. |
zendframework/zendframework |
Composer |
High
|
Fix reported |
|
| Zendframework URL Rewrite vulnerabilityGHSA-FH7R-58Q4-6387 · PKSA-Q68M-WT4M-JVSCVersion ranges need review. |
zendframework/zendframework |
Composer |
Medium
|
Fix reported |
|
| ZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilitiesGHSA-XG9W-R469-M455 · PKSA-N4JN-ZFZ3-4HXYVersion ranges need review. |
zendframework/zendframework |
Composer |
High
|
Fix reported |
|
| ZendFramework Information Disclosure and Insufficient Entropy vulnerabilityGHSA-2FHR-8R8R-QP56 · PKSA-JGK2-8MXQ-5256Version ranges need review. |
zendframework/zendframework |
Composer |
Medium
|
Fix reported |
|
| ZendXml and Zend Framework contain XXE and XEE VulnerabilitiesCVE-2015-5161 · GHSA-XP8P-9RQ5-4WGVVersion ranges need review. |
zendframework/zendframework1zendframework/zendframework |
Composer |
Medium
|
Fix reported |
|
| ZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`GHSA-JQ87-2WXP-8349 · PKSA-RM22-X953-KCXXVersion ranges need review. |
zendframework/zendframework |
Composer |
High
|
Fix reported |
|
| ZendFramework potential remote code execution in zend-mail via Sendmail adapterGHSA-GFF2-P6VM-3P8G · PKSA-Z1TZ-RMMP-KGKWVersion ranges need review. |
zendframework/zendframework |
Composer |
Medium
|
Fix reported |
|
| Zendframework session validation vulnerabilityGHSA-62F6-H68R-3JPW · PKSA-6XYB-PBYD-P1ZNVersion ranges need review. |
zendframework/zendframework |
Composer |
Medium
|
Fix reported |
|
| ZendFramework SQL injection due to execution of platform-specific SQL containing interpolationsGHSA-X2F4-8WXF-W3VF · PKSA-V96D-G8ZN-4B1WVersion ranges need review. |
zendframework/zendframework |
Composer |
High
|
Fix reported |
|
| ZendFramework vulnerable to Cross-site ScriptingGHSA-5GMF-3C43-Q73V · PKSA-H5JQ-D32D-KS95Version ranges need review. |
zendframework/zendframework |
Composer |
Medium
|
Fix reported |
|
| Zendframework vulnerable to XXE/XEE attacksGHSA-QC7W-4567-84WV · PKSA-ZG2N-4Q1R-BFVGVersion ranges need review. |
zendframework/zendframework |
Composer |
Critical
|
Fix reported |
|
| ZendFramework Potential Proxy Injection VulnerabilitiesGHSA-MG7H-9QFX-4R83 · PKSA-7CVS-SC1C-CKY4Version ranges need review. |
zendframework/zendframework |
Composer |
Medium
|
Fix reported |
|
| Doctrine Security Misconfiguration VulnerabilityCVE-2015-5723 · GHSA-PW5C-XQF2-6XC2Version ranges need review. |
aws/aws-sdk-phpdoctrine/annotations |
Composer |
High
|
Fix reported |
|
| Zend Framework Information DisclosureCVE-2015-7503 · GHSA-PM9M-W23Q-5967Version ranges need review. |
zendframework/zend-cryptzendframework/zendframework |
Composer |
High
|
Fix reported |
|
| Zend Framework SQL injection vulnerabilityCVE-2014-8089 · GHSA-QH9W-R7G5-Q939Version ranges need review. |
zendframework/zend-dbzendframework/zendframework1 |
Composer |
Critical
|
Fix reported |
|
| Remote code execution in zendframework and laminas-httpCVE-2021-3007 · GHSA-XX8F-QF9F-5FGW |
laminas/laminas-httpzendframework/zendframework |
Composer |
Critical
|
Fix reported |
|
| Zend Framework Allows SQL InjectionCVE-2016-6233 · GHSA-P9HP-3GPV-52W3 |
zendframework/zendframework1zendframework/zendframework |
Composer |
Critical
|
Fix reported |
|
| Zend Framework CSRF VulnerabilityCVE-2015-1786 · GHSA-GWWQ-54QP-9PGP |
zendframework/zend-validatorzendframework/zendframework |
Composer |
High
|
Fix reported |
|
