Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-0981

Malicious code in bioql PyPI...

9.8CVSS9AI score0.07306EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/02/05 1:2 a.m.5 views

CVE-2024-28861

Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in sfNamespacedParameterHolder class that would enable an attacker to get remot...

9.8CVSS7.8AI score0.07306EPSS
Exploits1References1
OSV
OSV
added 2024/03/22 4:56 p.m.18 views

GHSA-PV9J-C53Q-H433 Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

Summary Symfony 1 has a gadget chain due to dangerous unserialize in sfNamespacedParameterHolder class that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will...

9.8CVSS9.9AI score0.07306EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2024/03/22 4:56 p.m.30 views

Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

Summary Symfony 1 has a gadget chain due to dangerous unserialize in sfNamespacedParameterHolder class that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will...

9.8CVSS9.9AI score0.07306EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/03/22 4:43 p.m.19 views

CVE-2024-28861 Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in sfNamespacedParameterHolder class that would enable an attacker to get remot...

9.8CVSS10AI score0.07306EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/03/22 4:43 p.m.23 views

CVE-2024-28861 Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in sfNamespacedParameterHolder class that would enable an attacker to get remot...

9.8CVSS8.1AI score0.07306EPSS
Exploits1References2
OSV
OSV
added 2024/03/22 4:43 p.m.19 views

CVE-2024-28861 Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in sfNamespacedParameterHolder class that would enable an attacker to get remot...

9.8CVSS9.4AI score0.07306EPSS
Exploits1References4
Friends Of PHP
Friends Of PHP
added 2024/03/19 1:59 p.m.23 views

Deserialization Gadget chain in Symfony sfNamespacedParameterHolder

Summary Symfony 1 has a gadget chain due to dangerous unserialize in sfNamespacedParameterHolder class that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will...

9.8CVSS9.9AI score0.07306EPSS
Exploits1Affected Software1
Github Security Blog
Github Security Blog
added 2024/03/18 8:36 p.m.66 views

Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Summary Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will enable remote code executio...

9CVSS5.7AI score0.05107EPSS
Exploits1References7Affected Software3
OSV
OSV
added 2024/03/18 8:36 p.m.20 views

GHSA-WJV8-PXR6-5F4R Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Summary Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will enable remote code executio...

5CVSS5.7AI score0.05107EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2024/03/15 10:32 p.m.17 views

CVE-2024-28859 Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...

5CVSS8.1AI score0.05107EPSS
Exploits1References2
Friends Of PHP
Friends Of PHP
added 2024/02/27 8:26 p.m.64 views

Deserialization Gadget chain in Swift Mailer dependancy

Summary Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will enable remote code executio...

9CVSS5.7AI score0.05107EPSS
Exploits1Affected Software1
Friends Of PHP
Friends Of PHP
added 2020/12/08 7:18 p.m.17 views

Deserialization Gadget chain in Swift Mailer

Summary Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will enable remote code executio...

9CVSS5.7AI score0.05107EPSS
Exploits1Affected Software1
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.22 views

Deserialization Gadget chain in Swift Mailer

Summary Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will enable remote code executio...

9CVSS5.7AI score0.05107EPSS
Exploits1Affected Software1
Rows per page
Query Builder