Skip to contentSensiolabs vulnerabilities
Newest
- sensiolabs httpclient, symfony +1 moreInternal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-clientCVE-2024-50342Fix available3.1 Low
- sensiolabs symfonyAbility to change environment from query in symfony/runtimeCVE-2024-50340Public exploitFix availableEPSS 61.8%7.3 High
- sensiolabs symfonySymfony potential Cross-site Scripting in WebhookControllerCVE-2023-46735Fix available6.1 Medium
- sensiolabs symfony, debian linux, symfony twig-bridge +2 moreSymfony potential Cross-site Scripting vulnerabilities in CodeExtension filtersCVE-2023-46734Fix available6.1 Medium
- sensiolabs symfonySymfony possible session fixation vulnerabilityCVE-2023-46733Fix available6.5 Medium
- sensiolabs symfonySymfony storing cookie headers in HttpCacheCVE-2022-24894Public exploitFix available5.9 Medium
- sensiolabs symfonySymfony vulnerable to Session Fixation of CSRF tokensCVE-2022-24895Fix available6.3 Medium
- sensiolabs symfonyCSRF token missing in SymfonyCVE-2022-23601Fix available8.1 High
- sensiolabs symfony, fedoraproject fedora +1 moreCSV Injection in SymfonyCVE-2021-41270Fix available6.5 Medium
- sensiolabs symfonyWebcache Poisoning in SymfonyCVE-2021-41267Fix available6.5 Medium
- sensiolabs symfonyCookie persistence in SymfonyCVE-2021-41268Fix available6.5 Medium
- sensiolabs symfonyAuthentication granted with multiple firewallsCVE-2021-32693Fix available6.8 Medium
- sensiolabs symfony, fedoraproject fedora +1 morePrevent user enumeration using Guard or the new Authenticator-based SecurityCVE-2021-21424Public exploitFix available5.3 Medium
- sensiolabs httpclient, symfony, fedoraproject fedora +2 moreRCE in SymfonyCVE-2020-15094Fix available8.0 High
- sensiolabs symfonyFirewall configured with unanimous strategy was not actually unanimous in symfony/security-httpCVE-2020-5275Fix available7.6 High
- sensiolabs symfonyExceptions displayed in non-debug configurations in SymfonyCVE-2020-5274Fix available4.6 Medium
- sensiolabs symfonyPrevent cache poisoning via a Response Content-Type headerCVE-2020-5255Fix available2.6 Low
- sensiolabs symfony, fedoraproject fedora +1 moreSymfony Host Header Injection vulnerability in the HttpFoundation componentCVE-2013-4752Fix available6.1 Medium
- sensiolabs symfony, fedoraproject fedora +1 moreSymfony Unsafe Cache Serialization Could Enable RCECVE-2019-18889Fix availableEPSS 33.2%9.8 Critical
- sensiolabs symfonyImproper Input Validation in SymfonyCVE-2019-11325Fix available9.8 Critical
- sensiolabs symfony, fedoraproject fedora +1 moreArgument injection in a MimeTypeGuesser in SymfonyCVE-2019-18888Fix available7.5 High
- sensiolabs symfony, fedoraproject fedora +1 moreSymfony Http-Kernel has non-constant time comparison in UriSignerCVE-2019-18887Fix available8.1 High
- sensiolabs symfonyUser enumeration leak using switch user functionality in SymfonyCVE-2019-18886Fix available5.3 Medium
- sensiolabs symfony, fedoraproject fedora, redhat enterprise linux +2 moreSymfony collectionCascaded and collectionCascadedDeeply fields security bypassCVE-2013-4751Fix available8.1 High
- sensiolabs symfonySymfony Incorrect Access ControlCVE-2017-11365Fix available9.8 Critical
- sensiolabs symfonyDeserialization of untrusted data in SymfonyCVE-2019-10912Fix available7.1 High
- sensiolabs symfonyInvalid HTTP method overrides allow possible XSS or other attacks in SymfonyCVE-2019-10913Fix available9.8 Critical
- sensiolabs symfony, drupal +1 moreImproper authentication in SymfonyCVE-2019-10911Fix available7.5 High
- sensiolabs symfony, drupal +1 moreSymfony Service IDs Allow InjectionCVE-2019-10910Fix available9.8 Critical
- sensiolabs symfony, drupal +1 moreSymfony Cross-site Scripting (XSS) vulnerabilityCVE-2019-10909Public exploitFix available5.4 Medium
- sensiolabs symfony, debian linux, fedoraproject fedora +2 moreSymfony Open RedirectCVE-2018-19790Fix available6.1 Medium
- sensiolabs symfony, debian linux +1 moreSymfony Path DisclosureCVE-2018-19789Fix available5.3 Medium
- sensiolabs symfonySymfony Host Header InjectionCVE-2018-14774Fix available7.2 High
- sensiolabs symfony, debian linux, drupal +2 moreSymfony HTTP Foundation web cache poisoningCVE-2018-14773Fix availableEPSS 57.6%6.5 Medium
- sensiolabs symfony, debian linux +1 moreSymfony SSRF Vulnerability via Form ComponentCVE-2017-16790Fix available6.5 Medium
- sensiolabs symfony, debian linux +1 moreSymfony Directory TraversalCVE-2017-16654Fix available7.5 High
- sensiolabs symfony, debian linux +1 moreSymfony CSRF VulnerabilityCVE-2017-16653Fix available5.9 Medium
- sensiolabs symfony** DISPUTED ** The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2...CVE-2017-18343Fix availableDisputed6.1 Medium
- sensiolabs symfony** DISPUTED ** Reflected Cross-site scripting (XSS) vulnerability in the web profiler in...CVE-2018-12040Fix availableDisputed6.1 Medium
- sensiolabs symfony, debian linux +1 moreSymfony Open RedirectCVE-2018-11408Fix available6.1 Medium
- sensiolabs symfonySymfony Authentication BypassCVE-2018-11407Fix available9.8 Critical
- sensiolabs symfony, debian linux +1 moreSymfony CSRF Token FixationCVE-2018-11406Fix available8.8 High
- sensiolabs symfony, debian linux +1 moreSymfony DoSCVE-2018-11386Fix available5.9 Medium
- sensiolabs symfony, debian linux, fedoraproject fedora +2 moreSymfony Session Fixation VulnerabilityCVE-2018-11385Fix available8.1 High
- sensiolabs symfony, debian linux +1 moreSymfony Open RedirectCVE-2017-16652Fix available6.1 Medium
- sensiolabs symfonySymfony Authentication BypassCVE-2016-2403Fix available9.8 Critical
- sensiolabs symfony, debian linux +1 moreSymphony Denial of Service Via Overlong UsernamesCVE-2016-4423Fix available7.5 High
- sensiolabs symfony, debian linux +1 moreSymfony Cryptographic VulnerabilityCVE-2016-1902Fix available7.5 High
- sensiolabs symfonySymfony Vulnerable to Timing AttackCVE-2015-8125Fix available7.5 High
- sensiolabs symfonySymfony Session Fixation VulnerabilityCVE-2015-8124Fix available6.8 Medium
- Show moreLoading…