CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11 matches found

Circl•added 2019/05/16 10:51 p.m.•3 views

CVE-2019-10913

creationtimestamp| type| source ---|---|--- 2019-05-16 22:51:28+00:00| seen| https://t.me/cvemitreorg/29...

9.8CVSS7.3AI score0.00257EPSS

Exploits0References1

UbuntuCve•added 2019/05/16 10:29 p.m.•22 views

CVE-2019-10913

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to...

9.8CVSS7.2AI score0.00257EPSS

Exploits0References2

Debian CVE•added 2019/05/16 9:15 p.m.•32 views

CVE-2019-10913

9.8CVSS10AI score0.00257EPSS

Exploits0

CVE•added 2019/05/16 9:15 p.m.•549 views

CVE-2019-10913

CVE-2019-10913 affects the Symfony PHP framework's HTTP Foundation. Versions vulnerable include Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7. The issue: HTTP methods provided as verbs or via the X-Http-Method-Override header may be treat...

9.8CVSS9.7AI score0.00257EPSS

Exploits0References2Affected Software1

Tenable Nessus•added 2019/05/07 12:0 a.m.•43 views

Debian DLA-1778-1 : symfony security update

Several security vulnerabilities have been discovered in symfony, a PHP web application framework. Numerous symfony components are affected: Framework Bundle, Dependency Injection, Security, HttpFoundation CVE-2019-10909 Validation messages were not escaped when using the form theme of the PHP...

9.8CVSS8AI score0.11901EPSS

Exploits1References10

Debian•added 2019/05/06 7:15 p.m.•125 views

[SECURITY] [DLA 1778-1] symfony security update

Package : symfony Version : 2.3.21+dfsg-4+deb8u5 CVE ID : CVE-2019-10909 CVE-2019-10910 CVE-2019-10911 CVE-2019-10913 Several security vulnerabilities have been discovered in symfony, a PHP web application framework. Numerous symfony components are affected: Framework Bundle, Dependency Injection...

9.8CVSS9.3AI score0.11901EPSS

Exploits1

Tenable Nessus•added 2019/05/02 12:0 a.m.•35 views

Fedora 30 : php-symfony3 (2019-8635280de5)

Version 3.4.26 2019-04-17 - bug 31084 HttpFoundation Make MimeTypeExtensionGuesser case insensitive vermeirentony - bug 31142 Revert 'bug 30423 Security Rework firewall's access denied rule dimabory' chalasr - security cve-2019-10910 DI Check service IDs are valid nicolas-grekas - security...

9.8CVSS7.7AI score0.11901EPSS

Exploits1References2

Tenable Nessus•added 2019/05/02 12:0 a.m.•39 views

Fedora 30 : php-symfony4 (2019-f5d6a7ce74)

Version 4.2.7 2019-04-17 - bug 31107 Routing fix trailing slash redirection with non-greedy trailing vars nicolas-grekas - bug 31108 FrameworkBundle decorate the ValidatorBuilder's translator with LegacyTranslatorProxy nicolas-grekas - bug 31121 HttpKernel Fix get session when the request stack i...

9.8CVSS7.7AI score0.11901EPSS

Exploits1References2

Tenable Nessus•added 2019/04/29 12:0 a.m.•30 views

Fedora 29 : php-symfony (2019-f8db687840)

Version 2.8.50 2019-04-17 - security cve-2019-10910 DI Check service IDs are valid nicolas-grekas - security cve-2019-10909 FrameworkBundleForm Fix XSS issues in the form theme of the PHP templating engine stof - security cve-2019-10912 PHPUnit Bridge Prevent destructors with side-effects from...

9.8CVSS7.7AI score0.11901EPSS

Exploits1References2