Zend vulnerabilities
48 vulnerabilities
Known vulnerabilities in Zend products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 21 products.
Products
21- Zend Framework28 vulnerabilities
- Zendto8 vulnerabilities
- Zendopenid5 vulnerabilities
- Zend Platform4 vulnerabilities
- Framework3 vulnerabilities
- Zend Server3 vulnerabilities
- Zendrest3 vulnerabilities
- Zendservice Amazon3 vulnerabilities
- Zendservice Api3 vulnerabilities
- Zendservice Audioscrobbler3 vulnerabilities
- Zendservice Nirvanix3 vulnerabilities
- Zendservice Slideshare3 vulnerabilities
- Zendservice Technorati3 vulnerabilities
- Zendservice Windowsazure3 vulnerabilities
- Diactoros1 vulnerabilities
- Server1 vulnerabilities
- Zend Framework Preview1 vulnerabilities
- Zend Google Data Client Library Preview1 vulnerabilities
- Zend Cache1 vulnerabilities
- Zend Mail1 vulnerabilities
- Zf Apigility Doctrine1 vulnerabilities
CVE-2018-1000841zendzendto
EPSS score0.70%
Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can result in An attacker could execute arbitrary Javascript code in the context of the victim's browser.. This attack appear to be exploitable via HTTP POST request. This vulnerability appears to have been fixed in 5.16-1 Beta.CVE-2018-10230zendzend_serverEPSS score2.61%
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455.CVE-2013-6808zendzendtoEPSS score1.46%
Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php.CVE-2021-47667zendzendtoEPSS score36.61%
An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via a POST /dropoff request.CVE-2021-27888zendzendtoEPSS score0.65%
ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters.CVE-2021-3007getlaminaslaminas-http+1EPSS score75.31%
Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no longer supported by the maintainer. NOTE: the laminas-http vendor considers this a "vulnerability in the PHP language itself" but has added certain type checking as a way to prevent exploitation in (unrecommended) use cases where attacker-supplied data can be deserializedCVE-2015-1786zendzend_frameworkEPSS score0.66%
Cross-site request forgery (CSRF) vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers.CVE-2015-1555zendzend_frameworkEPSS score1.39%
Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators.CVE-2015-0270zendframework+1EPSS score1.10%
Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.CVE-2015-7695debianzendframework+3EPSS score2.89%
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.CVE-2015-7503mageiaphp-ZendFramework2+1EPSS score1.36%
Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.CVE-2015-5723debiandoctrine+19EPSS score0.38%
Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.CVE-2015-5161debianzendframework+4EPSS score9.87%
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.CVE-2015-3257zenddiactorosEPSS score0.91%
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.CVE-2015-3154ubuntuzend-framework+3EPSS score1.01%
CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the header of an email.CVE-2007-1370zendzend_platformEPSS score0.31%
Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files. NOTE: this only occurs when safe_mode and open_basedir are disabled; other settings require leverage for other vulnerabilities.CVE-2007-1369zendzend_platformEPSS score0.66%
ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the attacker-controlled php.ini file, and linking this directory to /usr/local/Zend/etc.CVE-2016-4861debianzendframework+4EPSS score4.12%
The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.CVE-2016-10034mageiaphp-ZendFramework2+2EPSS score38.44%
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.CVE-2016-6233ubuntuphp-zend-db+3EPSS score2.05%
The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use of the character pattern [\w]* in a regular expression.