1148 matches found
PT-2026-75301
TuxCare rebuilt zendframework/zend-http to address 1 CVE. Fixed in 2.5.6-p2+tuxcare...
php:php-fuzz-parser: Use-of-uninitialized-value in zend_get_compiled_lineno
Detailed Report: https://oss-fuzz.com/testcase?key=5443241508667392 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zendgetcompiledlineno getfilenamelineno...
php: heap-based buffer overflow in array_merge()
A flaw was found in PHP. A heap-based buffer overflow occurs in the arraymerge function when the total element count of packed arrays exceeds the 32-bit limit or the internal HTMAXSIZE due to an integer overflow in the precomputation of element counts using the zendhashnumelements function, causi...
GHSA-JG68-VHV3-9R8F Magento's X-Original-Url header can expose admin url
Impact The admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. Patches The bug comes from the Zend library and is patche by unsetting the header in the bootstrap process. Workarounds Unset the X-Original-Url header i...
Magento's X-Original-Url header can expose admin url
Impact The admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. Patches The bug comes from the Zend library and is patche by unsetting the header in the bootstrap process. Workarounds Unset the X-Original-Url header i...
PT-2026-6440
Impact The admin url can be discovered without prior knowledge of its location by exploiting the X-Original-Url header on some configurations. Patches The bug comes from the Zend library. Workarounds Unset the X-Original-Url header in the web server configuration. Resources...
CLSA-2026-1769445556 php: Fix of CVE-2025-14178
CVE-2025-14178: fix heap buffer overflow in arraymerge due to integer overflow in zendhashnumelements precomputation...
CLSA-2026-1768300005 php: Fix of CVE-2025-14178
CVE-2025-14178: fix integer overflow in the precomputation of element counts using zendhashnumelements...
CVE-2009-4417
The shutdown function in the ZendLogWriterMail class in Zend Framework ZF allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."...
CVE-2015-0270
Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter...
EUVD-2014-2104
Malware in sbrugna...
EUVD-2020-21687
Malware in sbrugna...
EUVD-2011-3782
Malware in sbrugna...
EUVD-2009-4384
Malware in sbrugna...
EUVD-2010-4662
Malware in sbrugna...
EUVD-2010-1933
Malware in sbrugna...
EUVD-2012-4382
Malware in sbrugna...
EUVD-2014-4833
Malware in sbrugna...