Zend Luki w zabezpieczeniach

Oś czasu

Rodzaj

Programming Tool Software20
Not Defined16
Software Library2

Produkt

Zend Framework20
Zend Server8
Zend Engine4
Zend Optimizer2
Zend Zend Google Data Client Library Preview2

Przeciwdziałanie

Official Fix30
Temporary Fix0
Workaround0
Unavailable0
Not Defined8

Wykorzystywanie

High2
Functional0
Proof-of-Concept20
Unproven8
Not Defined8

Wektor dostępu

Not Defined0
Physical0
Local2
Adjacent0
Network36

Uwierzytelnianie

Not Defined0
High0
Low0
None38

Interakcja z użytkownikiem

Not Defined0
Required12
None26

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤616
≤72
≤810
≤98
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤514
≤64
≤712
≤88
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤54
≤614
≤72
≤810
≤98
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k0
<10k10
<25k22
<50k6
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k32
<2k0
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (11): Engine (2), Framework (21), Optimizer (1), Server (6), Studio (1), Zend Framework (2), Zend Framework Preview (1), Zend Google Data Client Library Preview (1), Zend Platform (1), Zend Server (1), ZendTo (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2023-04-048.08.0Zend Framework unserialize privilege escalationProgramming Tool SoftwareNot DefinedNot Defined0.010770.03CVE-2020-29312
2016-10-125.34.8Zend Studio File Permission privilege escalationNieznanyProof-of-ConceptNot Defined0.000000.00
2016-06-079.89.4Zend Framework PDO Adapter sql injectionProgramming Tool SoftwareNot DefinedOfficial Fix0.016250.04CVE-2015-7695
2015-08-135.34.6Zend Framework Zend_XmlRpc_Server XML External EntityProgramming Tool SoftwareProof-of-ConceptOfficial Fix0.079110.02CVE-2015-5161
2014-10-108.58.4Zend Framework sql injectionProgramming Tool SoftwareHighOfficial Fix0.003750.02CVE-2014-8089
2014-10-105.34.6Zend Framework ldap_bind weak authenticationProgramming Tool SoftwareUnprovenOfficial Fix0.006000.02CVE-2014-8088
2014-09-047.37.0Zend Framework weak authenticationProgramming Tool SoftwareNot DefinedOfficial Fix0.015630.00CVE-2014-2685
2014-06-127.36.6Zend Framework SQL Statement order sql injectionProgramming Tool SoftwareProof-of-ConceptOfficial Fix0.000000.04
2014-04-175.24.9Zend Framework View Helper escapeHtml cross site scriptingProgramming Tool SoftwareHighOfficial Fix0.013450.02CVE-2014-4913
2014-03-215.34.6Zend Framework XML denial of serviceProgramming Tool SoftwareUnprovenOfficial Fix0.005610.02CVE-2014-2681

28 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 28 results.

◂ PoprzedniPrzeglądKolejny ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!