14 exploited vulnerabilities in Zend Framework

Vulnerabilities with publicly known exploits

Vendors: Laminas, Zend, Php, Piwik, Smarty, Suse
With known exploits: 14
Affected Getlaminas Laminas-http versions: < 2.14.2
Affected Zend Zend Framework versions: = 3.0.0, 2.4.10, 1.11.12, 1.12.0, 1.10.9, 1.11.6, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.6.0, 1.6.1, 1.6.2, 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.9.0, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 1.9.7, 1.9.8, 1.10.0, 1.10.1, 1.10.2
Affected Matomo versions: = 0.2.25, 0.2.26, 0.2.27, 0.2.28, 0.2.29, 0.2.30, 0.2.31, 0.2.32

CVE-2021-3007 2 exploits

CVSS 9.8 CRITICAL 2021-01-04FIX AVAILABLE

Exploit for Deserialization of Untrusted Data in Getlaminas Laminas-Http Exploit for Deserialization of Untrusted Data in Getlaminas Laminas-Http

CVSS 9.8 CRITICAL 2014-10-29FIX AVAILABLE

CVSS 9.8 CRITICAL 2019-10-25FIX AVAILABLE

CVSS 9.8 CRITICAL 2016-08-03FIX AVAILABLE

CVSS 9.8 CRITICAL 2016-10-21FIX AVAILABLE

CVE-2016-10034 9 exploits

CVSS 9.8 CRITICAL 2016-12-30FIX AVAILABLE

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit PHPMailer 5.2.20 with Exim MTA - Remote Code Execution

CVE-2012-3363 2 exploits

CVSS 9.1 CRITICAL 2013-02-13FIX AVAILABLE

DSquare Exploit Pack: D2SEC_ZEND_XMLRPC Zend Framework < 2.0.0 beta4 < 1.12 RC1 < 1.11.11 - Local File Disclosure

CVSS 8.8 HIGH 2017-06-08FIX AVAILABLE

CVE-2011-1939 1 exploit

CVSS 7.5 HIGH 2019-11-26FIX AVAILABLE

Zend Framework 1.11.4 - 'PDO_MySql' Security Bypass

CVSS 7.5 HIGH 2016-05-21FIX AVAILABLE

CVE-2009-4137 2 exploits

CVSS 7.5 HIGH 2009-12-24FIX AVAILABLE

Immunity Canvas: PIWIK Piwik 'unserialize()' PHP代码执行漏洞

CVE-2015-5161 6 exploits

CVSS 6.8 MEDIUM 2015-08-19FIX AVAILABLE

eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection

CVSS 6.1 MEDIUM 2015-05-20FIX AVAILABLE

CVSS 5.0 MEDIUM 2009-12-24