- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 14 · 1 critical
- Registry
- Packagist
Advisories 14
- CVE-2014-8089Unrated
SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP…
Affected: from 1.12.0, fixed in 1.12.9.
- CVE-2015-3154Unrated
CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows…
Affected: fixed in 1.12.12.
- CVE-2016-6233Unrated
The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL…
Affected: fixed in 1.12.19.
- CVE-2015-7695Unrated
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute…
Affected: fixed in 1.12.16.
- CVE-2015-5723Unrated
Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8…
Affected: from 1.12.0, fixed in 1.12.16.
- CVE-2015-5161Unrated
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when…
Affected: from 1.12.0, fixed in 1.12.14.
- CVE-2014-2683Unrated
Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest…
Affected: fixed in 1.12.4.
- CVE-2014-2682Unrated
Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest…
Affected: fixed in 1.12.4.
- CVE-2014-2681Unrated
Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest…
Affected: fixed in 1.12.4.
- CVE-2014-8088Unrated
The (1) Zend_Ldap class in Zend before 1.12.9 and (2) Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote…
Affected: from 1.12.0, fixed in 1.12.9.
- CVE-2012-5657Unrated
The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow…
Affected: fixed in 1.11.15; from 1.12.0-rc1, fixed in 1.12.1.
- CVE-2012-6532Unrated
(1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote…
Affected: from 1.0, fixed in 1.11.13; from 1.12.0-rc1, fixed in 1.12.0.
- CVE-2012-6531Unrated
(1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle…
Affected: from 1.0, fixed in 1.11.13; from 1.12.0-rc1, fixed in 1.12.0.
- CVE-2012-3363Critical 9.1
Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows…
Affected: from 1.0.0, fixed in 1.11.12; from 1.12.0-rc1, fixed in 1.12.0.