Latest vulnerabilities for vendor "zend"

9.8

First published (updated )

CVE-2020-29312

Zend ZendtoXSS

6.1

First published (updated )

CVE-2021-27888

composer/laminas/laminas-httpLaminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerab…

9.8

First published (updated )

CVE-2021-3007

Zend Zendtolib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validat…

9.8

First published (updated )

CVE-2020-8986

Zend ZendtoCSRF, XSS

8.8

First published (updated )

CVE-2020-8985

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Zend Zendtolib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-Fo…

7.5

First published (updated )

CVE-2020-8984

Zend Zend FrameworkXSS

6.1

First published (updated )

CVE-2014-4913

Zend Zend FrameworkSQL Injection

9.8

First published (updated )

CVE-2011-1939

Zend ZendtoXSS

6.1

First published (updated )

CVE-2018-1000841

Zend Zend ServerXSS

6.1

First published (updated )

CVE-2018-10230

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Debian Debian LinuxSQL Injection

9.8

First published (updated )

CVE-2014-4914

Zend Zend FrameworkInput Validation

9.1

First published (updated )

CVE-2015-1555

Fedoraproject FedoraSQL Injection

9.8

First published (updated )

CVE-2016-4861

Zend Zend-mailCommand Injection

9.8

First published (updated )

CVE-2016-10034

Fedoraproject FedoraSQL Injection

9.8

First published (updated )

CVE-2016-6233

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Debian Debian LinuxSQL Injection

9.8

First published (updated )

CVE-2015-7695

Zend Zend FrameworkInfoleak

7.5

First published (updated )

CVE-2015-7503

Zend Zend FrameworkXEE

6.8

First published (updated )

CVE-2015-5161

Doctrine-project Object Relational MapperFilesystem Permissions Issues in Multiple Components

7.8

First published (updated )

CVE-2015-5723

composer/zendframework/zend-diactorosXSS

6.1

First published (updated )

CVE-2015-3257

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/zendframework/zend-httpCRLF Injection

6.1

First published (updated )

CVE-2015-3154

Zend Zend FrameworkCSRF

8.8

First published (updated )

CVE-2015-1786

composer/zendframework/zend-dbSQL Injection

9.8

First published (updated )

CVE-2015-0270

Zend Zend FrameworkXEE

6.4

First published (updated )

CVE-2014-2681

Zend Zend FrameworkXEE

5

First published (updated )

CVE-2014-2683

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Zend Zend FrameworkXEE

6.8

First published (updated )

CVE-2014-2682

Zend ZendopenidThe GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_C…

6.4

First published (updated )

CVE-2014-2684

Zend Zend FrameworkAnonymous authentication in ldap_bind() function of PHP, using null byte

5

First published (updated )

CVE-2014-8088

composer/zendframework/zendframeworkSQL Injection

9.8

First published (updated )

CVE-2014-8089

Zend Zend FrameworkThe GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_C…

7.5

First published (updated )

CVE-2014-2685

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Zend ZendtoXSS

4.3

First published (updated )

CVE-2013-6808

Zend Zend FrameworkInfoleak, XEE

5

First published (updated )

CVE-2012-5657

Zend Zend FrameworkXEE

9.1

First published (updated )

CVE-2012-3363

Zend Zend FrameworkXEE

5

First published (updated )

CVE-2012-6532

Zend Zend FrameworkInput Validation

6.4

First published (updated )

CVE-2012-6531

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Zend Zend ServerUntrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when…

6

First published (updated )

CVE-2012-5382

Fedoraproject FedoraCVE-2012-4451

First published (updated )

CVE-2012-4451

Zend FrameworkInfoleak

5

First published (updated )

CVE-2011-3825

Zend FrameworkThe shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-depend…

5

First published (updated )

CVE-2009-4417

Zend Zend PlatformZend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which al…

6.2

First published (updated )

CVE-2007-1370

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Zend Zend Platformini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the sys…

4.4

First published (updated )

CVE-2007-1369

PHP PHPBuffer Overflow

7.5

First published (updated )

CVE-2007-1285

Zend Zend Framework PreviewXSS

6.8

First published (updated )

CVE-2006-5900

Zend Zend Google Data Client Library PreviewXSS

4.3

First published (updated )

CVE-2006-5717

Zend Zend PlatformCode Injection

7.5

First published (updated )

CVE-2006-4432

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Zend Zend PlatformBuffer Overflow