56 matches found
EUVD-2011-3782
Malware in sbrugna...
EUVD-2018-2305
Malware in sbrugna...
EUVD-2024-49749
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2011-3825
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the...
CVE-2024-9129
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino...
CVE-2024-9129
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino...
CVE-2024-9129
CVE-2024-9129 affects Zend Server versions 8.5 and earlier than 9.2. The vulnerability is a format string injection in Zend Server. According to the provided metrics, the CVSS 4.0 base score is 9.3 (CRITICAL) with NETWORK attack vector, no privileges required, no user interaction, and impacts to ...
CVE-2024-9129 Format String Injection in Zend Server
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino...
CVE-2024-9129 Format String Injection in Zend Server
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino...
Zend Server 格式化字符串错误漏洞
Zend Server is a complete and certified PHP distribution stack from Zend USA. A security vulnerability exists in Zend Server that stems from the inclusion of a formatting string injection issue...
CVE-2024-9129: Use of Externally-Controlled Format String
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino...
PT-2024-39449
Name of the Vulnerable Software and Affected Versions Zend Server versions 8.5 through 9.2 Description A format string injection issue was discovered in Zend Server. This issue was reported by Dylan Marino. Recommendations For versions 8.5 through 9.2, update to a version newer than 9.2 to resolv...
Zend Server Zend Debugger Cross-Site Scripting Vulnerability
Zend Server is a PHP Web development application server from Zend Technologies , which simplifies the development and running of PHP applications in Windows and Linux environments.Zend Debugger is one of the debugging tools. A cross-site scripting vulnerability exists in Zend Debugger in versions...
CVE-2018-10230
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455...
Design/Logic Flaw
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455...
CVE-2018-10230
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455...
CVE-2018-10230
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455...
CVE-2018-10230
CVE-2018-10230 affects Zend Server prior to 9.1.3 where Zend Debugger is vulnerable to Cross-Site Scripting. Exploitation path identified in Nuclei templates uses the debug_host parameter to inject arbitrary HTML/JavaScript into the server response, enabling a user’s browser to execute scripts. I...
CVE-2018-10230: Improper Neutralization of Input During Web Page Generation
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455...
PT-2018-9770
Name of the Vulnerable Software and Affected Versions: Zend Server versions prior to 9.1.3 Description: The issue affects Zend Debugger in Zend Server, allowing for XSS attacks. Recommendations: For versions prior to 9.1.3, update to version 9.1.3 or later to resolve the issue...