CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11 matches found

EUVD•added 2025/10/03 8:7 p.m.•1 views

EUVD-2025-16654

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00366EPSS

Exploits0References2

CVE•added 2021/12/20 10:46 p.m.•27 views

CVE-2020-16654

CVE-2020-16654 is rejected/not used and does not represent an active vulnerability entry.

6.7AI score

Exploits0

Cvelist•added 2021/12/20 10:46 p.m.•7 views

CVE-2020-16654

...

Exploits0

Debian•added 2019/03/10 1:19 a.m.•197 views

[SECURITY] [DLA 1707-1] symfony security update

Package : symfony Version : 2.3.21+dfsg-4+deb8u4 CVE ID : CVE-2017-16652 CVE-2017-16654 CVE-2018-11385 CVE-2018-11408 CVE-2018-14773 CVE-2018-19789 CVE-2018-19790 Several security vulnerabilities have been discovered in symfony, a PHP web application framework. Numerous symfony components are...

8.1CVSS6.9AI score0.16652EPSS

Exploits0

OpenVAS•added 2019/03/10 12:0 a.m.•89 views

Debian: Security Advisory (DLA-1707-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.8AI score0.16652EPSS

Exploits0References10

OSV•added 2018/09/07 5:29 a.m.•0 views

CVE-2018-16654

Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1...

6.1CVSS5.8AI score

Exploits0References1

CVE•added 2018/09/07 5:0 a.m.•38 views

CVE-2018-16654

Zurmo 3.2.4 Stable is affected by a cross-site scripting (XSS) vulnerability in the endpoint app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1. The issue allows injection of scripts via crafted URL parameters, escalating potential to modify or exfiltrate data (per CVSS metr...

6.1CVSS5.9AI score0.0024EPSS

Exploits1References1Affected Software1

CVE•added 2018/08/06 9:0 p.m.•86 views

CVE-2017-16654

CVE-2017-16654 (Symfony Directory Traversal) : The Symfony Intl component in affected lines (before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, 4.0-BETA5) uses bundle readers to load resource bundles from the local filesystem. The read() methods take a locale, which can be supplied from untrusted ...

7.5CVSS6.6AI score0.00543EPSS

Exploits0References4Affected Software1

Symfony•added 2017/11/17 12:0 a.m.•70 views

CVE-2017-16654: Intl bundle readers breaking out of paths

Affected versions Symfony 2.7.0 to 2.7.37, 2.8.0 to 2.8.30, 3.2.0 to 3.2.13, and 3.3.0 to 3.3.12 versions of the Symfony Intl component are affected by this security issue. The issue has been fixed in Symfony 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. Note that no fixes are provide...

7.5CVSS6.7AI score0.00543EPSS

Exploits0