CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
ua-parser/uap-phpPackagistua-parser/uap-php ReDoS vulnerabilityNo scorezendframework/zend-developer-toolsPackagistZend-developer-tools information disclosure vulnerability5.3 Mediumzendframework/zendframework1PackagistZend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed6.1 Mediumzendframework/zend-diactorosPackagistZend-Diactoros URL Rewrite vulnerability4.7 Mediumzendframework/zend-navigationPackagistZend-Navigation vulnerable to Cross-site Scripting7.5 Highzendframework/zend-feedPackagistZend-Feed URL Rewrite vulnerability7.5 Highzendframework/zendframework1PackagistZendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`6.1 Mediumzendframework/zend-formPackagistZend-Form vulnerable to Cross-site Scripting6.1 Mediumzendframework/zendframework1PackagistZendframework Potential XSS or HTML Injection vector in Zend_Json6.1 Mediumzendframework/zend-httpPackagistZend-HTTP URL Rewrite vulnerability7.5 Highzendframework/zendframework1PackagistZendFramework1 Potential Security Issues in Bundled Dojo LibraryNo scorezendframework/zend-jsonPackagistZend-JSON vulnerable to XXE/XEE attacks9.8 Criticalzendframework/zendframework1PackagistZendframework Denial of Service vector via XEE injection7.5 Highzendframework/zendframework1PackagistZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags`6.1 Mediumzendframework/zend-sessionPackagistZend-Session session validation vulnerability6.5 Mediumzendframework/zend-mailPackagistZend-Mail remote code execution in zend-mail via Sendmail adapter8.8 Highzendframework/zendframework1PackagistZendFramework potential XML eXternal Entity injection vectors7.5 Highzendframework/zendframework1PackagistZendFramework potential Cross-site Scripting vectors due to inconsistent encodings6.1 Mediumzendframework/zendframework1PackagistZendFramework potential SQL Injection Vector When Using PDO_MySql9.8 Criticalzendframework/zendframework1PackagistZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`6.1 Mediumzendframework/zend-xmlrpcPackagistZendFramework vulnerable to XXE/XEE attacks9.8 Criticalzendframework/zendframework1PackagistZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()`7.5 Highzendframework/zend-viewPackagistZendFramework has potential Cross-site Scripting vector in multiple view helpers6.1 Mediumzendframework/zendframeworkPackagistZendframework URL Rewrite vulnerability4.7 Mediumzendframework/zendframeworkPackagistZendFramework vulnerable to Cross-site Scripting6.1 Mediumzendframework/zendframeworkPackagistZendFramework Potential Proxy Injection Vulnerabilities5.9 Mediumzendframework/zendframeworkPackagistZendFramework Information Disclosure and Insufficient Entropy vulnerability5.3 Mediumzendframework/zendframeworkPackagistZendFramework SQL injection due to execution of platform-specific SQL containing interpolations8.8 Highzendframework/zendframeworkPackagistZendframework vulnerable to XXE/XEE attacks9.8 Criticalzendframework/zendframeworkPackagistZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilities7.4 Highzendframework/zendframeworkPackagistZendframework session validation vulnerability6.5 Mediumzendframework/zendframeworkPackagistZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`7.5 High- google omaha, updater +1 moreInappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a...7.8 High
- google omaha, updater +1 moreInappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a...7.8 High
zendframework/zendframeworkPackagistZendframework has potential Cross-site Scripting vector in multiple view helpers6.1 Mediumzendframework/zendframeworkPackagistZendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`7.5 Hightypo3/cmsPackagistTYPO3 Denial of Service in Online Media Asset Handling6.5 Mediumtypo3/cmsPackagistTYPO3 Information Disclosure in Install Tool5.3 Mediumtypo3/cmsPackagistTYPO3 Security Misconfiguration in Install Tool Cookie8.1 Hightypo3/cmsPackagistTYPO3 Cross-Site Scripting in Frontend User Login5.4 Mediumtypo3/cmsPackagistTYPO3 Cross-Site Scripting in Backend Modal Component5.4 Mediumtypo3/cmsPackagistTYPO3 Cross-Site Scripting in Online Media Asset Rendering5.4 Medium- wasmerSymlink bypasses filesystem sandbox in wasmer2.9 Low
typo3/cmsPackagistTYPO3 Arbitrary Code Execution via File List Module8.8 Hightypo3/cmsPackagistTYPO3 Denial of Service in Frontend Record Registration7.5 Hightypo3/cmsPackagistTYPO3 Information Disclosure of Installed Extensions5.3 Mediumtypo3/cmsPackagistTYPO3 Cross-Site Scripting in Form Framework validation handling6.1 Mediumtypo3/cmsPackagistTYPO3 Cross-Site Scripting in Form Framework6.1 Medium- bakery online ordering system project online ordering system, itsourcecode bakery online ordering system +1 moreitsourcecode Bakery Online Ordering System unrestricted upload6.9 Medium
typo3/cmsPackagistTYPO3 Security Misconfiguration for Backend User Accounts7.3 High- Show moreLoading…