Known vulnerabilities in Symfony - page 4

Vendor: SensioLabs
Software: Symfony
Software CPE: cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*
Total vulnerabilities: 91
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Symfony Symfony is affected by 91 known vulnerabilities: 14 high, 54 medium, 23 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26531 - Information Exposure Through an Error Message
CVE-2020-5274
CWE-209 Low
No
No
4.4.4, 5.0.4 02.04.2020 SB2020040207
#VU26479 - Permissions, Privileges, and Access Controls
CVE-2020-5275
CWE-264 Medium
No
No
4.4.7, 5.0.7 31.03.2020 SB2020033115
SB2020033141
#VU26478 - Improper input validation
CVE-2020-5255
CWE-20 Medium
No
No
4.4.7, 5.0.7 31.03.2020 SB2020033115
SB2020033141
#VU30475 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4752
CWE-79 Low
No
No
2.3.3 02.01.2020 SB2019110114
SB2013081004
#VU23181 - Permissions, Privileges, and Access Controls
CWE-264 Medium
No
No
3.4.36, 4.3.9, 4.4.1, 5.0.1 02.12.2019 SB2019120208
#VU22930 - Improper Control of Interaction Frequency
CVE-2019-18886
CWE-799 Low
No
No
4.2.12, 4.3.8 22.11.2019 SB2019111915
#VU22929 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-11325
CWE-94 High
No
No
4.2.12, 4.3.8 22.11.2019 SB2019111915
#VU22853 - Deserialization of Untrusted Data
CVE-2019-18889
CWE-502 High
No
No
2.8.52, 3.4.35, 4.2.12, 4.3.8 19.11.2019 SB2019111915
SB2019111916
SB2019111394
#VU22852 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-18888
CWE-78 Medium
No
No
2.8.52, 3.4.35, 4.2.12, 4.3.8 19.11.2019 SB2019111915
SB2019111916
SB2019111392
and 2 more
#VU22851 - Incorrect Comparison
CVE-2019-18887
CWE-697 Medium
No
No
2.8.52, 3.4.35, 4.2.12, 4.3.8 19.11.2019 SB2019111915
SB2019111916
SB2019111392
and 2 more
#VU30718 - Improper input validation
CVE-2013-4751
CWE-20 High
No
No
2.3.3 01.11.2019 SB2019110114
SB2013081003
#VU35878 - Improper Access Control
CVE-2017-11365
CWE-284 High
No
No
- 23.05.2019 SB2019052337
#VU31280 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-16652
CWE-601 Low
No
No
3.3.13 13.06.2018 SB2018061316
SB2017121225
SB2018062631
and 1 more
#VU31281 - Session Fixation
CVE-2018-11385
CWE-384 High
No
No
4.0.11 13.06.2018 SB2018061317
SB2018052818
SB2018052819
and 3 more
#VU31282 - Insufficient Session Expiration
CVE-2018-11386
CWE-613 Medium
No
No
4.0.11 13.06.2018 SB2018061317
SB2018052818
SB2018052819
and 3 more
#VU31283 - Cross-Site Request Forgery (CSRF)
CVE-2018-11406
CWE-352 Medium
No
No
4.0.11 13.06.2018 SB2018061317
SB2018052818
SB2018052819
and 3 more
#VU31284 - Improper Authentication
CVE-2018-11407
CWE-287 High
No
No
4.0.7 13.06.2018 SB2018061318
SB2018062631
SB2018062632
#VU31285 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-11408
CWE-601 Low
No
No
4.0.11 13.06.2018 SB2018061317
SB2018052818
SB2018052819
and 3 more
#VU39726 - Improper Authentication
CVE-2016-2403
CWE-287 High
No
No
- 07.02.2017 SB2017020707
#VU40586 - Improper input validation
CVE-2015-8124
CWE-20 Medium
No
No
- 07.12.2015 SB2015120704
SB2015112602
SB2015112603
and 1 more


Showing elements 61 - 80 out of 91