Known vulnerabilities in symfony (Debian package) - page 2

Vendor: Debian
Software CPE: cpe:2.3:o:debian:symfony_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 37
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting symfony (Debian package) symfony (Debian package) is affected by 37 known vulnerabilities: 6 high, 20 medium, 11 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132071 - Authentication Bypass by Spoofing
CVE-2026-45063
CWE-290 Low
No
No
5.4.53+dfsg-0+deb12u1, 6.4.41+dfsg-0+deb13u1 21.05.2026 SB2026052131
SB2026060202
SB2026060316
#VU100537 - Improper Authentication
CVE-2024-51996
CWE-287 High
No
No
5.4.23+dfsg-1+deb12u4 15.11.2024 SB20241115100
SB2024111602
SB2025021846
#VU99967 - Improper input validation
CVE-2024-50340
CWE-20 Medium
Available
No
5.4.23+dfsg-1+deb12u3, 5.4.53+dfsg-0+deb12u1, 6.4.41+dfsg-0+deb13u1 06.11.2024 SB2024110649
SB2024111157
SB2025021846
and 2 more
#VU99966 - Server-Side Request Forgery (SSRF)
CVE-2024-50342
CWE-918 Medium
No
No
5.4.23+dfsg-1+deb12u3 06.11.2024 SB2024110649
SB2024110732
SB2024110733
and 3 more
#VU99965 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-50345
CWE-601 Low
No
No
5.4.23+dfsg-1+deb12u3 06.11.2024 SB2024110649
SB2024111157
SB2025021846
and 4 more
#VU99963 - Improper input validation
CVE-2024-50343
CWE-20 Low
No
No
5.4.23+dfsg-1+deb12u3 06.11.2024 SB2024110647
SB2024111157
SB2025021846
#VU22853 - Deserialization of Untrusted Data
CVE-2019-18889
CWE-502 High
No
No
2.8.7+dfsg-1.3+deb9u3, 3.4.22+dfsg-2+deb10u1 19.11.2019 SB2019111915
SB2019111916
SB2019111394
#VU22852 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-18888
CWE-78 Medium
No
No
2.8.7+dfsg-1.3+deb9u3, 3.4.22+dfsg-2+deb10u1 19.11.2019 SB2019111915
SB2019111916
SB2019111392
and 2 more
#VU22851 - Incorrect Comparison
CVE-2019-18887
CWE-697 Medium
No
No
2.8.7+dfsg-1.3+deb9u3, 3.4.22+dfsg-2+deb10u1 19.11.2019 SB2019111915
SB2019111916
SB2019111392
and 2 more
#VU18300 - Improper input validation
CVE-2019-10913
CWE-20 Medium
No
No
2.8.7+dfsg-1.3+deb9u2 18.04.2019 SB2019041802
SB2019051003
SB2019041827
and 7 more
#VU18299 - Deserialization of Untrusted Data
CVE-2019-10912
CWE-502 Medium
No
No
2.8.7+dfsg-1.3+deb9u2 18.04.2019 SB2019041802
SB2019051003
SB2019062507
and 8 more
#VU18298 - Improper Authentication
CVE-2019-10911
CWE-287 Medium
No
No
2.8.7+dfsg-1.3+deb9u2 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18297 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10910
CWE-94 High
No
No
2.8.7+dfsg-1.3+deb9u2 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10909
CWE-79 Medium
No
No
2.8.7+dfsg-1.3+deb9u2 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU16615 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-19790
CWE-601 Low
No
No
2.8.7+dfsg-1.3+deb9u2 19.12.2018 SB2018121906
SB2019051003
SB2018120740
and 5 more
#VU16614 - Improper input validation
CVE-2018-19789
CWE-20 High
No
No
2.8.7+dfsg-1.3+deb9u2 19.12.2018 SB2018121906
SB2019051003
SB2018120740
and 5 more
#VU14165 - Exposed Dangerous Method or Function
CVE-2018-14773
CWE-749 Low
No
No
2.8.7+dfsg-1.3+deb9u2 01.08.2018 SB2018080118
SB2018080119
SB2019051003


Showing elements 21 - 40 out of 37