CVE-2012-6431

Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string...

ROS-20250212-16

A vulnerability in the Golang programming language is related to the fact that an HTTP client sends an Authorization header to a third-party domain after a chain of redirects in an uncontrolled consumption of resources. Authorization to a third-party domain after a chain of redirects with...

CVE-2016-5266

CVE-2016-5266 affects Mozilla Firefox before 48.0. The vulnerability arises from Firefox not properly restricting drag-and-drop (dataTransfer) actions for file: URIs, allowing user-assisted attackers to access local files via a crafted web site. Multiple connected advisories confirm the issue and...

PT-2012-6276

Name of the Vulnerable Software and Affected Versions Symfony versions 2.0.x before 2.0.20 Description The issue allows remote attackers to bypass intended URI restrictions via a doubly encoded string. This is due to inconsistent processing of URL encoded data within the Routing and Security...