Filters
composer/symfony/symfonySymfony potential Cross-site Scripting in WebhookController
6.1
First published (updated )
SensioLabs SymfonySymfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
6.1
First published (updated )
composer/symfony/symfonySymfony possible session fixation vulnerability
6.5
First published (updated )
composer/symfony/http-kernelWebcache Poisoning in Symfony
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/symfony/symfonyPrevent user enumeration using Guard or the new Authenticator-based Security
5.3
First published (updated )
composer/symfony/http-foundationPrevent cache poisoning via a Response Content-Type header
4.3
First published (updated )
composer/symfony/symfonyExceptions displayed in non-debug configurations in Symfony
5.5
First published (updated )
SensioLabs SymfonyCVE-2019-18886: Prevent user enumeration using switch user functionality
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/symfony/securityCVE-2018-19790: Open Redirect Vulnerability on login
6.1
First published (updated )
composer/symfony/http-foundationCVE-2018-14773: Remove support for legacy and risky HTTP headers
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/symfony/symfonyCVE-2018-11408: Open redirect vulnerability on security handlers
6.1
First published (updated )
composer/symfony/symfonyCVE-2018-11386: Denial of service when using PDOSessionHandler
5.9
First published (updated )
composer/symfony/symfonyCVE-2017-16652: Open redirect vulnerability on security handlers
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SensioLabs SymfonyCVE-2015-8124: Session Fixation in the "Remember Me" Login Feature
6.8
First published (updated )
SensioLabs SymfonyCVE-2015-4050: ESI unauthorized access
4.3
First published (updated )
SensioLabs SymfonyPossible DOS attack with long user-submitted passwords
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SensioLabs SymfonyCode execution vulnerability via the "internal" routes
6.8
First published (updated )
SensioLabs Symfonylib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary fil…
First published (updated )
SensioLabs SymfonySession fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony befor…
4.3
First published (updated )
SensioLabs SymfonyRoutes behind a firewall are accessible even when not logged in
6.4
First published (updated )