Lucene search
+L

9 matches found

OSV
OSV
added last week7 views

DEBIAN-CVE-2026-45075

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted, IsSignatureValid, and IsCsrfTokenValid attributes can be configured for GET only, but Symfony routes HEAD requests to the GET handler while the...

8.2CVSS6.2AI score0.00382EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added last week9 views

CVE-2026-45075

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted, IsSignatureValid, and IsCsrfTokenValid attributes can be configured for GET only, but Symfony routes HEAD requests to the GET handler while the...

8.3CVSS6.2AI score0.00382EPSS
Exploits0References2
OSV
OSV
added last week5 views

CVE-2026-45075 Symfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted, IsSignatureValid, and IsCsrfTokenValid attributes can be configured for GET only, but Symfony routes HEAD requests to the GET handler while the...

8.3CVSS6.2AI score0.00382EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.31 views

Linux Distros Unpatched Vulnerability : CVE-2026-45075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted,...

8.3CVSS6.2AI score0.00382EPSS
Exploits0References2
OSV
OSV
added 2025/09/05 5:10 p.m.0 views

MAL-2025-45075 Malicious code in lutfi-kentang87-breki (npm)

The package lutfi-kentang87-breki was found to contain malicious code...

7AI score
Exploits0
Circl
Circl
added 2024/09/04 7:25 p.m.7 views

CVE-2024-45075

creationtimestamp| type| source ---|---|--- 2024-09-04 19:25:20+00:00| seen| https://t.me/cvedetector/4805...

8.8CVSS4.8AI score0.00445EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/04 4:1 p.m.11 views

CVE-2024-45075 IBM webMethods Integration privilege escalation

IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication...

8.8CVSS7AI score0.00445EPSS
Exploits0References1
CVE
CVE
added 2023/11/08 10:27 p.m.70 views

CVE-2023-45075

CVE-2023-45075 describes a memory-leakage vulnerability in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. The issue is documented across multiple sources (NVD/Red Hat/NV mentions) and is associated with a CVSSv3.1 score of 6.7 (Me...

6.7CVSS6.3AI score0.00216EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/11/11 2:57 p.m.28 views

CVE-2022-45075

CVE-2022-45075 corresponds to a Broken Access Control vulnerability in the WordPress Activity Reactions For Buddypress plugin, affected versions

7.2AI score
Exploits0
Rows per page
Query Builder