Medium
ghsa-hx53-jchx-cr52
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
High
ghsa-q2gc-gg3x-7942
Symfony XML Entity Expansion security vulnerability
Critical
ghsa-mmcv-fvq8-r9x3
Symfony XML decoding attack vector through external entities
Medium
ghsa-7mx2-7q8p-pgmw
Symfony may allow a user to switch to using another user's identity
Critical
ghsa-j68w-pg49-f6vx
Symfony XML decoding attack vector through external entities
High
ghsa-rjpm-qmq7-q85w
Symfony XXE security vulnerability
High
CVE-2014-5245
Symfony allows direct access of ESI URLs behind a trusted proxy
Medium
CVE-2015-2309
Symfony has unsafe methods in the Request class
Medium
CVE-2014-6061
Symfony has a security issue when parsing the Authorization header
High
CVE-2014-5244
Symfony vulnerable to denial of service via a malicious HTTP Host header
Medium
ghsa-vfm6-r2gc-pwww
Symfony2 security issue when the trust proxy mode is enabled
High
CVE-2014-4931
Code injection in the way Symfony implements translation caching in FrameworkBundle
Medium
CVE-2024-35641
Just Writing Statistics <= 4.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5041
Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion
Medium
CVE-2024-35637
Church Admin <= 4.3.6 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2023-7073
Auto Featured Image (Auto Post Thumbnail) <= 4.1.7 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2024-35647
Global Notification Bar <= 1.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4565
Advanced Custom Fields <= 6.2.10 - Authenticated (Contributor+) Arbitrary Custom Field Access
Medium
CVE-2024-35638
ActiveDEMAND <= 0.2.43 - Cross-Site Request Forgery
Medium
CVE-2024-35633
Blocksy Companion <= 2.0.42 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2024-2793
Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.30 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-35646
Smartarget Message Bar <= 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35640
Safety Exit <= 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-35644
Preferred Languages <= 2.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.