2239 matches found
Fedora 21 : php-symfony-2.5.11-1.fc21 (2015-5457)
2.5.11 2015-04-01 - security 14167 CVE-2015-2308 nicolas-grekas - security 14166 CVE-2015-2309 neclimdul Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...
Fedora 20 : php-symfony-2.5.11-1.fc20 (2015-5464)
2.5.11 2015-04-01 - security 14167 CVE-2015-2308 nicolas-grekas - security 14166 CVE-2015-2309 neclimdul Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...
Fedora Update for php-symfony FEDORA-2015-5464
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-symfony FEDORA-2015-5457
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2015-5706 · Symfony · Symfony
Name of the Vulnerable Software and Affected Versions: Symfony HttpFoundation component versions 2.0.X through 2.6.X Description: The issue affects the SymfonyComponentHttpFoundationRequest class, which has a mechanism to ensure it does not trust HTTP header values coming from a "non-trusted"...
Esi Code Injection
More info at https://symfony.com/cve-2015-2308...
Esi Code Injection
More info at https://symfony.com/cve-2015-2308...
Unsafe methods in the Request class
More info at https://symfony.com/cve-2015-2309...
Unsafe methods in the Request class
More info at https://symfony.com/cve-2015-2309...
CVE-2015-2308: Esi Code Injection
Affected Versions All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, 2.5.X, and 2.6.X versions of the Symfony HttpKernel component are affected by this security issue. This issue has been fixed in Symfony 2.3.27, 2.5.11, and 2.6.6. Note that no fixes are provided for Symfony 2.0, 2.1, 2.2, and 2.4 as they ar...
CVE-2015-2309: Unsafe methods in the Request class
Affected Versions All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, 2.5.X, and 2.6.X versions of the Symfony HttpFoundation component are affected by this security issue. This issue has been fixed in Symfony 2.3.27, 2.5.11, and 2.6.6. Note that no fixes are provided for Symfony 2.0, 2.1, 2.2, and 2.4 as the...
Cross site scripting
Cross-site scripting XSS vulnerability in symfony/web/index.php/pim/viewEmployeeList in OrangeHRM before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the empsearchemployeenameempId parameter...
CVE-2013-5958
The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service CPU consumption via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a...
Design/Logic Flaw
The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service CPU consumption via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a...
CVE-2013-5958
The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service CPU consumption via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a...
CVE-2013-5958
The vulnerability CVE-2013-5958 affects the Symfony Security component: Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6. A long password can trigger an expensive PBKDF2 hash computation, leading to CPU-based denial of service. Remediation is upgrading ...
CVE-2013-5958
The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service CPU consumption via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a...
Pagekit 0.8.7 Cross Site Scripting / Open Redirect Vulnerabilities
Pagekit version 0.8.7 suffers from cross site scripting and open redirect vulnerabilities. Exploit Title: Pagekit 0.8.7 Multiple Vulnerabilities Date: 13-10-2014 Remote: Yes Exploit Author: Mahendra Vendor Homepage: http://www.pagekit.com/ Version: 0.8.7 Tested on: Windows XP SP 3 with WAMP Serve...
Fedora 21 : php-symfony-2.5.4-1.fc21 (2014-10239)
2.5.4 2014-09-03 - security 11832 CVE-2014-6072 fabpot - security 11831 CVE-2014-5245 stof - security 11830 CVE-2014-4931 aitboudad, Jeremy Derusse - security 11829 CVE-2014-6061 damz, fabpot - security 11828 CVE-2014-5244 nicolas-grekas, larowlan - bug 10197 FrameworkBundle PhpExtractor bugfix a...