Zend vulnerabilities

Products

• Framework 27
• Zendto 8
• Zendopenid 5
• Platform 4
• Framework 3
• Zendrest 3
• Server 3
• Zendservice Amazon 3
• Zendservice Api 3
• Zendservice Audioscrobbler 3
• Zendservice Nirvanix 3
• Zendservice Slideshare 3
• Zendservice Technorati 3
• Zendservice Windowsazure 3

Newest

• zend zendto A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote... CVE-2025-32352 4.8 MediumApril 5, 2025
• zend zendto An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6... CVE-2021-47667 EPSS 36.4% 10.0 CriticalApril 5, 2025
• zend server Format String Injection in Zend Server CVE-2024-9129 9.3 CriticalOctober 22, 2024
• zend framework An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary... CVE-2020-29312 Disputed 9.8 CriticalApril 4, 2023
• zend zendto ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has... CVE-2021-27888 6.1 MediumMarch 2, 2021
• getlaminas laminas-http, zend framework +1 more Remote code execution in zendframework and laminas-http CVE-2021-3007 Public exploitFix availableDisputed EPSS 75.3% 9.8 CriticalJanuary 4, 2021
• zend zendto lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when... CVE-2020-8986 9.8 CriticalMarch 24, 2020
• zend zendto ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user... CVE-2020-8985 8.8 HighMarch 24, 2020
• zend zendto lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded... CVE-2020-8984 7.5 HighMarch 24, 2020
• zend framework, fedoraproject fedora, redhat enterprise linux +2 more Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow... CVE-2012-4451 Fix available 6.1 MediumJanuary 3, 2020
• debian linux, zend framework, zendframework +2 more ZF2014-03 has a potential cross site scripting vector in multiple view helpers CVE-2014-4913 6.1 MediumDecember 15, 2019
• php, zend framework, zendframework +1 more +3 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2011-1939 Public exploitFix available 9.8 CriticalNovember 26, 2019
• zend framework Zend Framework Allows SQL Injection CVE-2015-0270 Fix available 9.8 CriticalOctober 25, 2019
• zend zendto Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify... CVE-2018-1000841 6.1 MediumDecember 20, 2018
• zend server Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455. CVE-2018-10230 6.1 MediumApril 19, 2018
• zend diactoros zend-diactoros Cross-site Scripting (XSS) CVE-2015-3257 Fix available 6.1 MediumAugust 25, 2017
• zend framework Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows... CVE-2015-1555 9.1 CriticalAugust 7, 2017
• zend framework Zend Framework CSRF Vulnerability CVE-2015-1786 Fix available 8.8 HighJune 8, 2017
• zend zend-mail, framework +1 more zend-mail remote code execution via Sendmail adapter CVE-2016-10034 Public exploitFix available EPSS 38.4% 9.8 CriticalDecember 30, 2016
• zend framework, fedoraproject fedora +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2016-4861 Public exploitFix available 9.8 CriticalOctober 5, 2016
• zend framework, fedoraproject fedora +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2016-6233 Fix available 9.8 CriticalAugust 3, 2016
• zend framework Zend Framework Information Disclosure CVE-2015-7503 Fix available 7.5 HighMay 21, 2016
• zend framework, debian linux +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2015-7695 Fix available 9.8 CriticalOctober 6, 2015
• doctrine-project annotations, cache, common +7 more +9 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2015-5723 Fix available 7.8 HighOctober 6, 2015
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2015-5161 Public exploitFix available 6.8 MediumAugust 19, 2015
• zend framework Zenario CMS vulnerable to CRLF injection CVE-2015-3154 Fix available 6.1 MediumMay 20, 2015
• zend framework, fedoraproject fedora, redhat enterprise linux +2 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-8089 Fix available 9.8 CriticalOctober 29, 2014
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-8088 Fix available 5.0 MediumOctober 22, 2014
• zend framework, debian linux +1 more The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle... CVE-2014-4914 Fix available 9.8 CriticalAugust 5, 2014
• zend framework, zendopenid +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2685 Fix available 7.5 HighApril 3, 2014
• zend framework, zendopenid +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2684 Fix available 6.4 MediumApril 3, 2014
• zend framework, zendopenid, zendrest +7 more +9 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2683 Fix available 5.0 MediumApril 3, 2014
• zend framework, zendopenid, zendrest +7 more +9 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2682 Fix available 6.8 MediumApril 3, 2014
• zend framework, zendopenid, zendrest +7 more +9 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2681 Fix available 6.4 MediumApril 3, 2014
• zend zendto Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows... CVE-2013-6808 4.3 MediumDecember 28, 2013
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-6532 Fix available 5.0 MediumFebruary 13, 2013
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-6531 Fix available 6.4 MediumFebruary 13, 2013
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-5657 Fix available 5.0 MediumJanuary 8, 2013
• zend server ** DISPUTED ** Untrusted search path vulnerability in the installation functionality in Zend... CVE-2012-5382 Public exploitDisputed 6.0 MediumOctober 11, 2012
• zend framework, debian linux, fedoraproject fedora +2 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-3363 Public exploitFix available EPSS 49.3% 9.1 CriticalJune 29, 2012
• zend framework, server +1 more Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive... CVE-2011-3825 5.0 MediumSeptember 24, 2011
• zend framework The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context... CVE-2009-4417 5.0 MediumDecember 24, 2009
• zend platform Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which... CVE-2007-1370 6.2 MediumMarch 9, 2007
• zend platform ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the... CVE-2007-1369 Public exploit 4.4 MediumMarch 9, 2007
• zend framework preview Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections... CVE-2006-5900 6.8 MediumNovember 15, 2006
• zend google data client library preview Multiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData... CVE-2006-5717 4.3 MediumNovember 4, 2006
• zend platform Directory traversal vulnerability in Zend Platform 2.2.1 and earlier allows remote attackers to... CVE-2006-4432 7.5 HighAugust 29, 2006
• zend platform Multiple buffer overflows in the (a) Session Clustering Daemon and the (b) mod_cluster module in... CVE-2006-4431 7.5 HighAugust 29, 2006