Lucene search
+L

9 matches found

OSV
OSV
•added 2026/07/14 7:17 p.m.•16 views

DEBIAN-CVE-2026-45075

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted, IsSignatureValid, and IsCsrfTokenValid attributes can be configured for GET only, but Symfony routes HEAD requests to the GET handler while the...

8.2CVSS5.9AI score0.00429EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/14 7:17 p.m.•17 views

CVE-2026-45075

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted, IsSignatureValid, and IsCsrfTokenValid attributes can be configured for GET only, but Symfony routes HEAD requests to the GET handler while the...

8.3CVSS6AI score0.00429EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/14 6:40 p.m.•21 views

CVE-2026-45075 Symfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted, IsSignatureValid, and IsCsrfTokenValid attributes can be configured for GET only, but Symfony routes HEAD requests to the GET handler while the...

8.3CVSS6.2AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•37 views

Linux Distros Unpatched Vulnerability : CVE-2026-45075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted,...

8.3CVSS5.9AI score0.00429EPSS
SaveExploits0References2
OSV
OSV
•added 2025/09/05 5:10 p.m.•6 views

MAL-2025-45075 Malicious code in lutfi-kentang87-breki (npm)

The package lutfi-kentang87-breki was found to contain malicious code...

7AI score
SaveExploits0
Circl
Circl
•added 2024/09/04 7:25 p.m.•17 views

CVE-2024-45075

creationtimestamp| type| source ---|---|--- 2024-09-04 19:25:20+00:00| seen| https://t.me/cvedetector/4805...

8.8CVSS4.8AI score0.00445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/09/04 4:01 p.m.•30 views

CVE-2024-45075 IBM webMethods Integration privilege escalation

IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication...

8.8CVSS7AI score0.00445EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/08 10:27 p.m.•108 views

CVE-2023-45075

CVE-2023-45075 describes a memory-leakage vulnerability in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. The issue is documented across multiple sources (NVD/Red Hat/NV mentions) and is associated with a CVSSv3.1 score of 6.7 (Me...

6.7CVSS6.3AI score0.00216EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/11/11 2:57 p.m.•44 views

CVE-2022-45075

CVE-2022-45075 corresponds to a Broken Access Control vulnerability in the WordPress Activity Reactions For Buddypress plugin, affected versions

7.2AI score
SaveExploits0
Rows per page
Query Builder