Lucene search
+L

188 matches found

Debian CVE
Debian CVE
•added 2019/05/16 9:31 p.m.•70 views

CVE-2019-10910

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

9.8CVSS8.3AI score0.06024EPSS
SaveExploits1
CVE
CVE
•added 2019/05/16 9:31 p.m.•1344 views

CVE-2019-10910

CVE-2019-10910 affects Symfony versions prior to fixed releases: Symfony 2.7.51+, 2.8.50+, 3.x 3.4.26+, 4.x 4.1.12+, and 4.2.x 4.2.7+. The issue arises when service IDs can be influenced by user input, allowing SQL injection and remote code execution via the dependency-injection component. Mitiga...

9.8CVSS9.8AI score0.06024EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/16 12:00 a.m.•4 views

CVE-2019-10910: Improper Neutralization of Special Elements used in an SQL Command

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

9.8CVSS8.6AI score0.06024EPSS
SaveExploits1References2
Symfony
Symfony
•added 2019/04/17 12:00 a.m.•93 views

CVE-2019-10910: Check service IDs are valid

Affected versions Symfony 2.7.0 to 2.7.50, 2.8.0 to 2.8.49, 3.4.0 to 3.4.25, 4.1.0 to 4.1.11 and 4.2.0 to 4.2.6 versions of the Symfony Dependency Injection component are affected by this security issue. The issue has been fixed in Symfony 2.7.51, 2.8.50, 3.4.26, 4.1.12 and 4.2.7. Note that no...

9.8CVSS9.7AI score0.06024EPSS
SaveExploits1
Fedora
Fedora
•added 2016/04/22 1:53 a.m.•59 views

[SECURITY] Fedora 22 Update: springframework-amqp-1.3.9-4.fc22

The Spring AMQP project applies core Spring concepts to the development of AMQP-based messaging solutions. It provides a "template" as a high-level abstraction for sending and receiving messages. It also provides support for Message driven POJOs with a "listener container". These libraries...

9.8CVSS2AI score0.06283EPSS
SaveExploits1
Fedora
Fedora
•added 2016/04/17 11:49 p.m.•57 views

[SECURITY] Fedora 24 Update: springframework-amqp-1.3.9-4.fc24

The Spring AMQP project applies core Spring concepts to the development of AMQP-based messaging solutions. It provides a "template" as a high-level abstraction for sending and receiving messages. It also provides support for Message driven POJOs with a "listener container". These libraries...

9.8CVSS2AI score0.06283EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2013/12/17 12:00 a.m.•27 views

Fedora Update for php-symfony2-DependencyInjection FEDORA-2013-22422

Check for the Version of php-symfony2-DependencyInjection OpenVAS Vulnerability Test Fedora Update for php-symfony2-DependencyInjection FEDORA-2013-22422 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

5CVSS6.3AI score0.01868EPSS
SaveExploits0References2
Fedora
Fedora
•added 2013/12/09 2:00 a.m.•31 views

[SECURITY] Fedora 18 Update: php-symfony2-DependencyInjection-2.2.10-1.fc18

The Dependency Injection component allows you to standardize and centralize the way objects are constructed in your application. For an introduction to Dependency Injection and service containers see Service Container http://symfony.com/doc/current/book/servicecontainer.ht ml...

5CVSS2.4AI score0.01868EPSS
SaveExploits0
Rows per page
Query Builder