929 matches found
CVE-2018-1000841
CVE-2018-1000841 affects Zend.To prior to version 5.15-1 with a Cross Site Scripting (XSS) vulnerability in verify.php. The issue allows an attacker to execute arbitrary JavaScript in the victim’s browser, exploitable via HTTP POST. The vulnerability is reported as fixed in version 5.16-1 Beta. M...
PHProjekt: Multiple vulnerabilities
Background PHProjekt is an application suite that supports communication and management of teams and companies. Description Multiple vulnerabilities have been discovered in PHProjekt due to embedded Zend Framework. Please review the GLSA identifiers referenced below for details. Impact Remote...
Fedora Update for php-zendframework-zend-feed FEDORA-2018-7da5983771
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-zendframework-zend-diactoros FEDORA-2018-4a606489ae
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-zendframework-zend-diactoros FEDORA-2018-dbb0d41078
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-zendframework-zend-http FEDORA-2018-71e9650fa9
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 28 Update: php-zendframework-zend-feed-2.10.3-1.fc28
Zend\Feed provides functionality for consuming RSS and Atom feeds. It provides a natural syntax for accessing elements of feeds, feed attribut es, and entry attributes. Zend\Feed also has extensive support for modifying fe ed and entry structure with the same natural syntax, and turning the resul...
[SECURITY] Fedora 28 Update: php-zendframework-zend-http-2.8.1-1.fc28
Zend\Http is a primary foundational component of Zend Framework. Since much of what PHP does is web-based, specifically HTTP, it makes sense to have a performant, extensible, concise and consistent API to do all things HTTP. Documentation: https://zendframework.github.io/zend-http/...
Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now
It's time to update your Drupal websites. Drupal, the popular open-source content management system, has released a new version of its software to patch a security bypass vulnerability that could allow a remote attacker to take control of the affected websites. The vulnerability, tracked as...
Drupal Core Multiple Security Vulnerabilities (SA-CORE-2018-005) - Linux
Drupal is prone to multiple security vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Drupal Core Multiple Security Vulnerabilities (SA-CORE-2018-005) - Windows
Drupal is prone to multiple security vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Drupal Core - 3rd-party libraries -SA-CORE-2018-005
The Drupal project uses the Symfony library. The Symfony library has released a security update that impacts Drupal. Refer to the Symfony security advisory for the issue. The same vulnerability also exists in the Zend Feed and Diactoros libraries included in Drupal core; however, Drupal core does...
Drupal Core - 3rd-party libraries -SA-CORE-2018-005
The Drupal project uses the Symfony library. The Symfony library has released a security update that impacts Drupal. Refer to the Symfony security advisory for the issue. The same vulnerability also exists in the Zend Feed and Diactoros libraries included in Drupal core; however, Drupal core does...
URL Rewrite vulnerability
More info at https://framework.zend.com/security/advisory/ZF2018-01...
URL Rewrite vulnerability
More info at https://framework.zend.com/security/advisory/ZF2018-01...
URL Rewrite vulnerability
More info at https://framework.zend.com/security/advisory/ZF2018-01...
Zend Server Zend Debugger Cross-Site Scripting Vulnerability
Zend Server is a PHP Web development application server from Zend Technologies , which simplifies the development and running of PHP applications in Windows and Linux environments.Zend Debugger is one of the debugging tools. A cross-site scripting vulnerability exists in Zend Debugger in versions...
php: Stack based 1-byte buffer over-write in zend_ini_do_op() function Zend/zend_ini_parser.c
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zendinidoop function in Zend/zendiniparser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input...
