51 matches found
Fedora Update for php-zendframework-zend-diactoros FEDORA-2018-4a606489ae
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-zendframework-zend-diactoros FEDORA-2018-dbb0d41078
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Drupal Core Multiple Security Vulnerabilities (SA-CORE-2018-005) - Linux
Drupal is prone to multiple security vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Drupal Core - 3rd-party libraries -SA-CORE-2018-005
The Drupal project uses the Symfony library. The Symfony library has released a security update that impacts Drupal. Refer to the Symfony security advisory for the issue. The same vulnerability also exists in the Zend Feed and Diactoros libraries included in Drupal core; however, Drupal core does...
Cross-Site Scripting (XSS)
zend-diactoros is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary javascript through the URI of a generated form...
Cross site scripting
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting XSS or open redirect attacks...
CVE-2015-3257
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting XSS or open redirect attacks...
CVE-2015-3257
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting XSS or open redirect attacks...
CVE-2015-3257
The CVE-2015-3257 entry affects Zend/Diactoros (Uri::filterPath) prior to version 1.0.4. The root cause is improper sanitization of path input, enabling remote attackers to perform cross-site scripting (XSS) or open redirects. The impact is client-facing URL parsing vulnerabilities that could lea...
Zend zend-diactoros has multiple vulnerabilities
Zend Framework is a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services . zend-diactoros is an implementation of PSR-7 HTTP messages . A cross-site scripting vulnerability and an open redirection vulnerability exists in Zend...
