İçeriğe atla
Noroxi

sensiolabs kayıtları

sensiolabs üreticisine ait 91 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%97,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

91 kayıt
  • CVE-2019-18889
    49Planlayın

    An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7.

    KritikCVSS 9,8İstismar yokEPSS %33

    sensiolabs · symfony21 Kas 2019

  • CVE-2024-50340
    48Planlayın

    Ability to change environment from query in symfony/runtime

    YüksekCVSS 7,3Kavram kanıtıEPSS %61

    symfony · symfony6 Kas 2024

  • CVE-2018-14773
    43Planlayın

    An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13

    OrtaCVSS 6,5İstismar yokEPSS %57

    sensiolabs · symfony3 Ağu 2018

  • CVE-2019-10910
    41Planlayın

    In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user inp

    KritikCVSS 9,8İstismar yokEPSS %6

    sensiolabs · symfony16 May 2019

  • CVE-2016-2403
    40Planlayın

    Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid us

    KritikCVSS 9,8İstismar yokEPSS %4

    sensiolabs · symfony7 Şub 2017

  • CVE-2019-11325
    40Planlayın

    An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8.

    KritikCVSS 9,8İstismar yokEPSS %3

    sensiolabs · symfony21 Kas 2019

  • CVE-2018-11407
    40Planlayın

    An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.

    KritikCVSS 9,8İstismar yokEPSS %2

    sensiolabs · symfony13 Haz 2018

  • CVE-2019-10913
    40Planlayın

    In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs

    KritikCVSS 9,8İstismar yokEPSS %1

    sensiolabs · symfony16 May 2019

  • CVE-2017-11365
    40Planlayın

    Certain Symfony products are affected by: Incorrect Access Control.

    KritikCVSS 9,8İstismar yokEPSS %1

    sensiolabs · symfony23 May 2019

  • CVE-2024-51736
    39İzleyin

    Command execution hijack on Windows with Process class in symfony/process

    KritikCVSS 9,8İstismar yokEPSS %0

    sensiolabs · symfony6 Kas 2024

  • CVE-2022-24894
    36İzleyin

    Symfony storing cookie headers in HttpCache

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    sensiolabs · symfony3 Şub 2023

  • CVE-2020-15094
    36İzleyin

    In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class

    YüksekCVSS 8,8İstismar yokEPSS %3

    sensiolabs · httpclient2 Eyl 2020

  • CVE-2026-45063
    36İzleyin

    Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator

    KritikCVSS 9,1İstismar yokEPSS %0

    sensiolabs · symfony14 Tem 2026

  • CVE-2021-32693
    35İzleyin

    Authentication granted with multiple firewalls

    YüksekCVSS 8,8İstismar yokEPSS %1

    sensiolabs · symfony17 Haz 2021

  • CVE-2021-41268
    35İzleyin

    Cookie persistence in Symfony

    YüksekCVSS 8,8İstismar yokEPSS %1

    sensiolabs · symfony24 Kas 2021

  • CVE-2022-24895
    35İzleyin

    Symfony vulnerable to Session Fixation of CSRF tokens

    YüksekCVSS 8,8İstismar yokEPSS %0

    sensiolabs · symfony3 Şub 2023

  • CVE-2018-11406
    35İzleyin

    An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4

    YüksekCVSS 8,8İstismar yokEPSS %0

    sensiolabs · symfony13 Haz 2018

  • CVE-2022-23601
    35İzleyin

    CSRF token missing in Symfony

    YüksekCVSS 8,8İstismar yokEPSS %0

    sensiolabs · symfony1 Şub 2022

  • CVE-2026-45069
    35İzleyin

    Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

    YüksekCVSS 8,8İstismar yokEPSS %0

    sensiolabs · symfony14 Tem 2026

  • CVE-2026-45304
    34İzleyin

    Symfony: YAML Parser Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")

    YüksekCVSS 8,7İstismar yokEPSS %0

    sensiolabs · symfony14 Tem 2026

  • CVE-2026-45305
    34İzleyin

    Symfony: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex

    YüksekCVSS 8,7İstismar yokEPSS %0

    sensiolabs · symfony14 Tem 2026

  • CVE-2026-48489
    34İzleyin

    Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes

    YüksekCVSS 8,7İstismar yokEPSS %0

    sensiolabs · symfony14 Tem 2026

  • CVE-2026-45071
    34İzleyin

    Symfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    sensiolabs · symfony14 Tem 2026

  • CVE-2026-45068
    34İzleyin

    Symfony: Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address

    YüksekCVSS 8,7İstismar yokEPSS %0

    sensiolabs · symfony14 Tem 2026

  • CVE-2018-11385
    33İzleyin

    An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4

    YüksekCVSS 8,1İstismar yokEPSS %1

    sensiolabs · symfony13 Haz 2018