Skip to content

zendframework/zendframework1 vulnerabilities (Packagist)

30 vulnerabilities.

zendframework/zendframework1 Packagist Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed GHSA-4vf6-mq7w-3hp6 Fix available 6.1 MediumJune 7, 2024
zendframework/zendframework1 Packagist Zendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide` GHSA-4v57-pwvf-x35j Fix available 6.1 MediumJune 7, 2024
zendframework/zendframework1 Packagist Zendframework Potential XSS or HTML Injection vector in Zend_Json GHSA-vvm3-rv48-j3g5 Fix available 6.1 MediumJune 7, 2024
zendframework/zendframework1 Packagist ZendFramework1 Potential Security Issues in Bundled Dojo Library GHSA-w5mj-j45q-m638 Fix available No scoreJune 7, 2024
zendframework/zendframework1 Packagist Zendframework Denial of Service vector via XEE injection GHSA-2jx7-xg83-j2m7 Fix available 7.5 HighJune 7, 2024
zendframework/zendframework1 Packagist ZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags` GHSA-gwpm-pm6x-h7rj Fix available 6.1 MediumJune 7, 2024
zendframework/zendframework1 Packagist ZendFramework potential XML eXternal Entity injection vectors GHSA-4j9x-g4x8-vcmf Fix available 7.5 HighJune 7, 2024
zendframework/zendframework1 Packagist ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings GHSA-hg35-vqp3-fv39 Fix available 6.1 MediumJune 7, 2024
zendframework/zendframework1 Packagist ZendFramework potential SQL Injection Vector When Using PDO_MySql GHSA-qf36-fx9f-232x Fix available 9.8 CriticalJune 7, 2024
zendframework/zendframework1 Packagist ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor` GHSA-j543-vg33-g6vj Fix available 6.1 MediumJune 7, 2024
zendframework/zendframework1 Packagist ZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()` GHSA-hx3m-959f-v849 Fix available 7.5 HighJune 7, 2024
zendframework/zendframework1 Packagist Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow... CVE-2012-4451 Fix available 6.1 MediumJanuary 3, 2020
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2011-1939 Public exploitFix available 9.8 CriticalNovember 26, 2019
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2016-4861 Public exploitFix available 9.8 CriticalOctober 5, 2016
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2016-6233 Fix available 9.8 CriticalAugust 3, 2016
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2015-7695 Fix available 9.8 CriticalOctober 6, 2015
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2015-5723 Fix available 7.8 HighOctober 6, 2015
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2015-5161 Public exploitFix available 6.8 MediumAugust 19, 2015
zendframework/zendframework1 Packagist Zenario CMS vulnerable to CRLF injection CVE-2015-3154 Fix available 6.1 MediumMay 20, 2015
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-8089 Fix available 9.8 CriticalOctober 29, 2014
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-8088 Fix available 5.0 MediumOctober 22, 2014
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2685 Fix available 7.5 HighApril 3, 2014
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2684 Fix available 6.4 MediumApril 3, 2014
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2683 Fix available 5.0 MediumApril 3, 2014
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2682 Fix available 6.8 MediumApril 3, 2014
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2681 Fix available 6.4 MediumApril 3, 2014
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-6532 Fix available 5.0 MediumFebruary 13, 2013
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-6531 Fix available 6.4 MediumFebruary 13, 2013
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-5657 Fix available 5.0 MediumJanuary 8, 2013
zendframework/zendframework1 Packagist Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-3363 Public exploitFix available EPSS 49.3% 9.1 CriticalJune 29, 2012