Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sensiolabs symfony 2.7.2 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2016-1902
The nextBytes function in the SecureRandom class in Symfony prior to 2.3.37, 2.6.x prior to 2.6.13, and 2.7.x prior to 2.7.9 does not properly generate random numbers when used with PHP 5.x without the paragonie/random_compat library and the openssl_random_pseudo_bytes function f...
Debian Debian Linux 8.0Sensiolabs Symfony 2.7.7Sensiolabs Symfony 2.7.6Sensiolabs Symfony 2.7.5Sensiolabs Symfony 2.7.4Sensiolabs Symfony 2.6.3Sensiolabs Symfony 2.6.2Sensiolabs Symfony 2.6.1Sensiolabs Symfony 2.6.0Sensiolabs Symfony 2.6.11Sensiolabs Symfony 2.6.10Sensiolabs Symfony 2.6.9Sensiolabs Symfony 2.6.8Sensiolabs Symfony 2.7.2Sensiolabs Symfony 2.7.0Sensiolabs Symfony 2.6.6Sensiolabs Symfony 2.6.4Sensiolabs SymfonySensiolabs Symfony 2.7.8Sensiolabs Symfony 2.7.3Sensiolabs Symfony 2.7.1Sensiolabs Symfony 2.6.12
5
CVSSv2
CVE-2016-4423
The attemptAuthentication function in Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php in Symfony prior to 2.3.41, 2.7.x prior to 2.7.13, 2.8.x prior to 2.8.6, and 3.0.x prior to 3.0.6 does not limit the length of a username stored in a session, whi...
Sensiolabs Symfony 3.0.5Sensiolabs Symfony 3.0.4Sensiolabs Symfony 3.0.3Sensiolabs Symfony 2.7.4Sensiolabs Symfony 2.7.5Sensiolabs Symfony 2.7.6Sensiolabs Symfony 2.7.7Sensiolabs Symfony 2.8.4Sensiolabs Symfony 2.8.3Sensiolabs Symfony 2.8.2Sensiolabs Symfony 2.8.1Sensiolabs Symfony 2.7.12Sensiolabs SymfonySensiolabs Symfony 3.0.2Sensiolabs Symfony 3.0.0Sensiolabs Symfony 2.7.0Sensiolabs Symfony 2.7.2Sensiolabs Symfony 2.7.9Sensiolabs Symfony 2.7.11Sensiolabs Symfony 3.0.1Sensiolabs Symfony 2.8.5Sensiolabs Symfony 2.8.0
6.8
CVSSv2
CVE-2015-8124
Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x prior to 2.3.35, 2.6.x prior to 2.6.12, and 2.7.x prior to 2.7.7 allows remote malicious users to hijack web sessions via a session id.
Sensiolabs Symfony 2.3.24Sensiolabs Symfony 2.3.33Sensiolabs Symfony 2.3.2Sensiolabs Symfony 2.3.8Sensiolabs Symfony 2.3.21Sensiolabs Symfony 2.3.7Sensiolabs Symfony 2.3.14Sensiolabs Symfony 2.3.12Sensiolabs Symfony 2.3.17Sensiolabs Symfony 2.6.6Sensiolabs Symfony 2.6.9Sensiolabs Symfony 2.7.3Sensiolabs Symfony 2.7.2Sensiolabs Symfony 2.3.27Sensiolabs Symfony 2.3.32Sensiolabs Symfony 2.3.19Sensiolabs Symfony 2.3.6Sensiolabs Symfony 2.3.4Sensiolabs Symfony 2.3.31Sensiolabs Symfony 2.3.5Sensiolabs Symfony 2.3.22Sensiolabs Symfony 2.3.10
7.5
CVSSv2
CVE-2015-8125
Symfony 2.3.x prior to 2.3.35, 2.6.x prior to 2.6.12, and 2.7.x prior to 2.7.7 might allow remote malicious users to have unspecified impact via a timing attack involving the (1) Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or (2) Symfony/Comp...
Sensiolabs Symfony 2.3.6Sensiolabs Symfony 2.3.7Sensiolabs Symfony 2.3.14Sensiolabs Symfony 2.3.15Sensiolabs Symfony 2.3.22Sensiolabs Symfony 2.3.23Sensiolabs Symfony 2.3.31Sensiolabs Symfony 2.3.32Sensiolabs Symfony 2.6.4Sensiolabs Symfony 2.6.5Sensiolabs Symfony 2.7.0Sensiolabs Symfony 2.7.1Sensiolabs Symfony 2.3.3Sensiolabs Symfony 2.3.4Sensiolabs Symfony 2.3.5Sensiolabs Symfony 2.3.12Sensiolabs Symfony 2.3.13Sensiolabs Symfony 2.3.20Sensiolabs Symfony 2.3.21Sensiolabs Symfony 2.3.29Sensiolabs Symfony 2.3.30Sensiolabs Symfony 2.6.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook