Filter
AND
AND
Versions
2.8.0
9
2.7.0
8
3.3.0
7
2.0.0
6
4.0.0
6
4.1.0
5
5.0.0
5
2.0.1
4
2.0.10
4
2.0.11
4
2.0.12
4
2.0.13
4
2.0.14
4
2.0.15
4
2.0.16
4
2.0.17
4
2.0.18
4
2.0.19
4
2.0.2
4
2.0.3
4
2.0.4
4
2.0.5
4
2.0.6
4
2.0.7
4
2.0.8
4
2.0.9
4
2.1.0
4
3.4.0
4
4.2.0
4
2.0.20
3
2.1.1
3
2.1.2
3
2.1.3
3
2.2.0
3
2.3.0
3
2.3.19
3
2.3.20
3
2.3.21
3
2.3.22
3
2.3.23
3
2.3.24
3
2.3.25
3
2.3.26
3
2.6.0
3
2.6.1
3
2.6.3
3
2.6.4
3
2.6.5
3
3.0.0
3
1.4.0
2
1.4.0-rc1
2
1.4.0-rc2
2
1.4.1
2
1.4.10
2
1.4.11
2
1.4.12
2
1.4.13
2
1.4.14
2
1.4.15
2
1.4.16
2
1.4.17
2
1.4.2
2
1.4.3
2
1.4.4
2
1.4.5
2
1.4.6
2
1.4.7
2
1.4.8
2
1.4.9
2
2.0.21
2
2.0.22
2
2.1.4
2
2.1.5
2
2.1.6
2
2.1.7
2
2.2-dev
2
2.2.1
2
2.2.2
2
2.2.3
2
2.2.4
2
2.2.5
2
2.2.6
2
2.2.8
2
2.3.1
2
2.3.2
2
2.3.27
2
2.3.28
2
2.3.3
2
2.3.4
2
2.3.5
2
2.4.10
2
2.4.9
2
2.5.10
2
2.5.4
2
2.5.5
2
2.5.6
2
2.5.7
2
2.5.8
2
2.5.9
2
2.6.6
2
2.6.7
2
2.7.37
2
3.2.0
2
3.2.13
2
3.3.12
2
4.4.0
2
6.0.0
2
1.4.18
1
1.4.19
1
2.0.23
1
2.0.24
1
2.1.10
1
2.1.11
1
2.1.12
1
2.1.8
1
2.1.9
1
2.2.10
1
2.2.11
1
2.2.9
1
2.3.10
1
2.3.11
1
2.3.12
1
2.3.13
1
2.3.14
1
2.3.15
1
2.3.16
1
2.3.17
1
2.3.18
1
2.3.29
1
2.3.30
1
2.3.31
1
2.3.32
1
2.3.33
1
2.3.34
1
2.3.6
1
2.3.7
1
2.3.8
1
2.3.9
1
2.4.1
1
2.4.2
1
2.4.3
1
2.4.4
1
2.4.5
1
2.4.6
1
2.4.7
1
2.4.8
1
2.5.1
1
2.5.11
1
2.5.2
1
2.5.3
1
2.6.10
1
2.6.11
1
2.6.2
1
2.6.8
1
2.6.9
1
2.7.1
1
2.7.2
1
2.7.3
1
2.7.4
1
2.7.48
1
2.7.5
1
2.7.6
1
2.8.30
1
2.8.43
1
3.3.17
1
3.3.6
1
3.4.13
1
3.8.0
1
3.8.30
1
4.0.13
1
4.1.2
1
4.2.11
1
4.3.0
1
4.3.7
1
5.2.0
1
5.4.21
1
6.2.7
1
composer/symfony/symfonySymfony potential Cross-site Scripting in WebhookController
6.1
First published (updated )
composer/symfony/symfonySymfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
6.1
First published (updated )
composer/symfony/symfonySymfony possible session fixation vulnerability
6.5
First published (updated )
composer/symfony/http-kernelWebcache Poisoning in Symfony
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/symfony/symfonyPrevent user enumeration using Guard or the new Authenticator-based Security
5.3
First published (updated )
composer/symfony/http-foundationPrevent cache poisoning via a Response Content-Type header
4.3
First published (updated )
composer/symfony/symfonyExceptions displayed in non-debug configurations in Symfony
5.5
First published (updated )
SensioLabs SymfonyCVE-2019-18886: Prevent user enumeration using switch user functionality
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/symfony/securityCVE-2018-19790: Open Redirect Vulnerability on login
6.1
First published (updated )
composer/symfony/http-foundationCVE-2018-14773: Remove support for legacy and risky HTTP headers
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/symfony/symfonyCVE-2018-11408: Open redirect vulnerability on security handlers
6.1
First published (updated )
composer/symfony/symfonyCVE-2018-11386: Denial of service when using PDOSessionHandler
5.9
First published (updated )
composer/symfony/symfonyCVE-2017-16652: Open redirect vulnerability on security handlers
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SensioLabs SymfonyCVE-2015-8124: Session Fixation in the "Remember Me" Login Feature
6.8
First published (updated )
SensioLabs SymfonyCVE-2015-4050: ESI unauthorized access
4.3
First published (updated )
SensioLabs SymfonyPossible DOS attack with long user-submitted passwords
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SensioLabs SymfonyCode execution vulnerability via the "internal" routes
6.8
First published (updated )
SensioLabs Symfonylib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary fil…
First published (updated )
SensioLabs SymfonySession fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony befor…
4.3
First published (updated )
SensioLabs SymfonyRoutes behind a firewall are accessible even when not logged in
6.4
First published (updated )