Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist zendframework/zendframework1 Security Advisories

Browse all Security Advisories for packagist zendframework/zendframework1

Loading...
Critical
GSA_kwCzR0hTQS02ZnF3LWozdm0tN2Y2Ns4AA80W
Zendframework1 Potential SQL injection in ORDER and GROUP functions
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: 6 months ago
High
GSA_kwCzR0hTQS04NDhmLW1waDUtOXBtOc4AA80V
Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 6 months ago
High
GSA_kwCzR0hTQS04eGh2LWdxbTQtM3c5Oc4AA80U
ZendFramework1 Potential Insufficient Entropy Vulnerability
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 6 months ago
Critical
GSA_kwCzR0hTQS12NDJnLTdxMngtY3czMs4AA80T
Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: 6 months ago
Critical
GSA_kwCzR0hTQS0yeDM2LXFoeDMtN201Zs4AA80R
ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: 6 months ago
High
GSA_kwCzR0hTQS05djc4LWgyMjYtMnJtcc4AA80Q
Zendframework potential security issue in login mechanism
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS00dmY2LW1xN3ctM2hwNs4AA80L
Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 17.8
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS00djU3LXB3dmYteDM1as4AA80H
Zendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 17.8
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS12dm0zLXJ2NDgtajNnNc4AA80F
Zendframework Potential XSS or HTML Injection vector in Zend_Json
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 17.8
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS13NW1qLWo0NXEtbTYzOM4AA80D
ZendFramework1 Potential Security Issues in Bundled Dojo Library
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 6 months ago
High
GSA_kwCzR0hTQS0yMjl4LTIyeGMtMmYyd84AA80B
Zendframework Local file disclosure via XXE injection in Zend_XmlRpc
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 25.2
Published: 6 months ago
High
GSA_kwCzR0hTQS0yang3LXhnODMtajJtN84AA80A
Zendframework Denial of Service vector via XEE injection
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS1nd3BtLXBtNngtaDdyas4AA8z_
ZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags`
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 17.8
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS1nNTJwLTg2ajUteHI4cc4AA8zx
ZendFramework Potential Cross-site Scripting in Development Environment Error View Script
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 17.8
Published: 6 months ago
Critical
GSA_kwCzR0hTQS1taHB4LTNydjgtd3Jqbc4AA8zv
ZendFramework potential XML eXternal Entity injection vectors
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: 6 months ago
High
GSA_kwCzR0hTQS00ajl4LWc0eDgtdmNtZs4AA8zu
ZendFramework potential XML eXternal Entity injection vectors
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS1oZzM1LXZxcDMtZnYzOc4AA8zt
ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 17.8
Published: 6 months ago
Critical
GSA_kwCzR0hTQS1xZjM2LWZ4OWYtMjMyeM4AA8zs
ZendFramework potential SQL Injection Vector When Using PDO_MySql
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS1qNTQzLXZnMzMtZzZ2as4AA8zr
ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 17.8
Published: 6 months ago
High
GSA_kwCzR0hTQS1oeDNtLTk1OWYtdjg0Oc4AA8zp
ZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()`
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 6 months ago
Critical
GSA_kwCzR0hTQS1xaDl3LXI3ZzUtcTkzOc4AA7QZ
Zend Framework SQL injection vulnerability
Ecosystems: packagist
Packages: zendframework/zendframework, zendframework/zend-db, zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 38.2
Published: 7 months ago
Moderate
GSA_kwCzR0hTQS01OTU3LTVjcngtNzlqeM4AAjaE
Zenario CMS vulnerable to CRLF injection
Ecosystems: packagist
Packages: zendframework/zend-http, zendframework/zendframework1, zendframework/zendframework
Source: GitHub Advisory Database
Blast Radius: 23.8
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1oNXAzLTdtZzYtaGdqNM4AAfTM
Zend Framework XEE Vulnerability
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS05bTV2LXZxNGYtbXJ2Zs4AAfNp
Zend Framework XXE Vulnerability
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1qaDR4LTR3bWYtNjdwcs4AAfNX
Zend Framework XEE Vulnerability
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
High
GSA_kwCzR0hTQS03cGc0LTUyMzMtODJqds4AAe3Y
Zend Framework XXE Vulnerability
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 21.4
Published: over 2 years ago
High
GSA_kwCzR0hTQS1wdzVjLXhxZjItNnhjMs4AAdEh
Doctrine Security Misconfiguration Vulnerability
Ecosystems: packagist
Packages: zfcampus/zf-apigility-doctrine, zendframework/zendframework, zendframework/zend-cache, doctrine/cache, aws/aws-sdk-php, zendframework/zendframework1, doctrine/mongodb-odm-bundle, doctrine/mongodb-odm, doctrine/orm, doctrine/common, doctrine/annotations
Source: GitHub Advisory Database
Blast Radius: 40.4
Published: over 2 years ago
Critical
GSA_kwCzR0hTQS0yaHZoLWM1YzItdmo4Nc4AAdEL
Zend Framework SQL injection vector using null byte for PDO
Ecosystems: packagist
Packages: zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 28.7
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS14cDhwLTlycTUtNHdnds4AAcYZ
ZendXml and Zend Framework contain XXE and XEE Vulnerabilities
Ecosystems: packagist
Packages: zendframework/zendframework, zendframework/zendxml, zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1mNnJjLXJoNDMtaDhncs4AAYTG
Zend Access Restriction Bypass
Ecosystems: packagist
Packages: zendframework/zendframework1, zendframework/zendframework
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Critical
GSA_kwCzR0hTQS1wOWhwLTNncHYtNTJ3M84AAVUb
Zend Framework Allows SQL Injection
Ecosystems: packagist
Packages: zendframework/zendframework1, zendframework/zendframework
Source: GitHub Advisory Database
Blast Radius: 38.2
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1ncDM5LWg5YzItcXc3Oc4AATUL
Several Zend Products Vulnerable to XXE and XEE attacks
Ecosystems: packagist
Packages: zendframework/zendservice-api, zendframework/zendservice-amazon, zendframework/zendservice-windowsazure, zendframework/zendservice-technorati, zendframework/zendservice-slideshare, zendframework/zendservice-nirvanix, zendframework/zendservice-audioscrobbler, zendframework/zendrest, zendframework/zendopenid, zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS00M3hnLTg3eHctanB2OM4AATUJ
Several Zend Products Vulnerable to XXE and XEE attacks
Ecosystems: packagist
Packages: zendframework/zendservice-api, zendframework/zendservice-amazon, zendframework/zendservice-windowsazure, zendframework/zendservice-technorati, zendframework/zendservice-slideshare, zendframework/zendservice-nirvanix, zendframework/zendservice-audioscrobbler, zendframework/zendrest, zendframework/zendopenid, zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS01d20yLTM4cTUtNXJ4ds4AATUI
Several Zend Products Vulnerable to XXE and XEE attacks
Ecosystems: packagist
Packages: zendframework/zendservice-api, zendframework/zendservice-amazon, zendframework/zendservice-windowsazure, zendframework/zendservice-technorati, zendframework/zendservice-slideshare, zendframework/zendservice-nirvanix, zendframework/zendservice-audioscrobbler, zendframework/zendrest, zendframework/zendopenid, zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Statistics
Advisories: 20,668
Packages: 9,040
Repositories: 4
Ecosystems: 12
Filter by Severity
Moderate 8,836 High 7,269 Critical 3,070 Low 1,144
Filter by Ecosystem
maven 5,864 packagist 4,634 pypi 4,352 npm 3,812 go 2,295 nuget 1,552 cargo 882 rubygems 880 swift 33 hex 32 actions 20 pub 9
Filter by Package
moodle/moodle 367 magento/community-edition 235 typo3/cms 174 pimcore/pimcore 118 dolibarr/dolibarr 113 typo3/cms-core 106 microweber/microweber 94 phpmyadmin/phpmyadmin 92 drupal/core 92 silverstripe/framework 85 drupal/drupal 78 librenms/librenms 74 thorsten/phpmyfaq 70 symfony/symfony 69 concrete5/concrete5 60 shopware/platform 52 baserproject/basercms 47 craftcms/cms 46 showdoc/showdoc 40 shopware/core 40 intelliants/subrion 39 froxlor/froxlor 38 mautic/core 37 nilsteampassnet/teampass 37 snipe/snipe-it 35 zendframework/zendframework1 34 shopware/shopware 30 getgrav/grav 29 mediawiki/core 28 centreon/centreon 27 prestashop/prestashop 26 magento/core 24 contao/core-bundle 24 pocketmine/pocketmine-mp 23 grumpydictator/firefly-iii 23 remdex/livehelperchat 23 simplesamlphp/simplesamlphp 23 zendframework/zendframework 23 getkirby/cms 22 tribalsystems/zenario 22 laravel/framework 20 funadmin/funadmin 20 contao/contao 19 cockpit-hq/cockpit 18 forkcms/forkcms 18 topthink/framework 18 genix/cms 17 cakephp/cakephp 17 symfony/security 17 opencart/opencart 17 ezsystems/ezpublish-kernel 17 francoisjacquet/rosariosis 17 openmage/magento-lts 16 yetiforce/yetiforce-crm 16 phpbb/phpbb 16 typo3/cms-backend 16 ec-cube/ec-cube 15 october/system 15 smarty/smarty 15 symfony/security-http 15 feehi/cms 14 phpmailer/phpmailer 14 dompdf/dompdf 14 silverstripe/cms 14 bolt/bolt 14 elefant/cms 13 studio-42/elfinder 13 pimcore/admin-ui-classic-bundle 13 codeigniter4/framework 13 impresscms/impresscms 13 lavalite/cms 13 sylius/sylius 13 admidio/admidio 13 symfony/http-foundation 12 phpoffice/phpspreadsheet 12 wwbn/avideo 12 phpmyfaq/phpmyfaq 12 nukeviet/nukeviet 11 pagekit/pagekit 11 wallabag/wallabag 11 feehi/feehicms 11 tinymce/tinymce 11 ezsystems/ezplatform-kernel 11 tinymce 11 TinyMCE 11 ssddanbrown/bookstack 10 yiisoft/yii2 10 october/october 10 ezsystems/ezpublish-legacy 10 sulu/sulu 10 bootstrap 9 twbs/bootstrap 9 bootstrap 9 org.webjars:bootstrap 9 contao/core 9 kevinpapst/kimai2 9 alextselegidis/easyappointments 9 statamic/cms 9 concrete5/core 9 bootstrap 9 pimcore/customer-management-framework-bundle 8 composer/composer 8 facturascripts/facturascripts 8 ezsystems/ezplatform-admin-ui 8 codiad/codiad 8 gilacms/gila 8 silverstripe/graphql 8 twig/twig 8 pterodactyl/panel 8 croogo/croogo 8 october/cms 8 silverstripe/admin 8 mantisbt/mantisbt 8 bootstrap.sass 7 october/backend 7 backdrop/backdrop 7 flarum/core 7 wpglobus/wpglobus 7 bootstrap-sass 7 passbolt/passbolt_api 7 symfony/http-kernel 7 billz/raspap-webgui 7 yourls/yourls 6 oro/platform 6 bagisto/bagisto 6 directmailteam/direct-mail 6 icecoder/icecoder 6 dweeves/magmi 6 yiisoft/yii2-dev 6 vrana/adminer 6 guzzlehttp/guzzle 6 in2code/femanager 6 gleez/cms 6 zoujingli/thinkadmin 6 phpseclib/phpseclib 6 nystudio107/craft-seomatic 6 pear/archive_tar 6 typo3/flow 5 bottelet/flarepoint 5 cachethq/cachet 5 phpservermon/phpservermon 5 symfony/security-core 5 woocommerce/woocommerce 5 typo3/cms-install 5 thinkcmf/thinkcmf 5 limesurvey/limesurvey 5 simplesamlphp/saml2 5 silverstripe/assets 5 ibexa/core 5 illuminate/database 5 symfony/security-bundle 5 anchorcms/anchor-cms 5 neos/neos 5 neos/flow 5 codeigniter/framework 5 gugoan/economizzer 5 phpxmlrpc/phpxmlrpc 5 mautic/core-lib 5 bootstrap-sass 5 kimai/kimai 5 elgg/elgg 5 ezyang/htmlpurifier 4 sylius/resource-bundle 4 bref/bref 4 pyrocms/pyrocms 4 ezsystems/ezplatform 4 processwire/processwire 4 oro/commerce 4 zendframework/zendopenid 4 bytefury/crater 4 typo3/html-sanitizer 4 shopware/storefront 4 adodb/adodb-php 4 evolutioncms/evolution 4 typo3/cms-frontend 4 spatie/browsershot 4 friendsofsymfony/user-bundle 4 reportico-web/reportico 4 magento/product-community-edition 4 automad/automad 4 codeigniter4/shield 4 shopxo/shopxo 4 notrinos/notrinos-erp 4 appwrite/server-ce 4 wp-premium/gravityforms 4 modx/revolution 4 idno/known 4 wintercms/winter 4 ckeditor4 3 typo3/phar-stream-wrapper 3 bbpress/bbpress 3 froala/wysiwyg-editor 3 artesaos/seotools 3 amphp/http-client 3 redaxo/source 3 enhavo/enhavo-app 3 zencart/zencart 3 privatebin/privatebin 3 prestashop/productcomments 3 joomla/framework 3
Filter by Repository
https://github.com/zendframework/zf1 5 https://github.com/zendframework/zendframework 1 https://github.com/aws/aws-sdk-php 1