Zend Framework
Approved changes feed: RSS · Atom
cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Zend (c83920c2-ab0f-5e38-ada6-b090c6d186df) |
|---|---|
| Product | Zend Framework (adb3ead0-24cb-5c32-9ebb-1f8628d0b936) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/zendframework |
purl2cpe | 2026-06-01 10:11:09.882047 |
pkg:deb/ubuntu/zendframework |
purl2cpe | 2026-06-01 10:11:09.882049 |
pkg:github/zendframework/zendframework |
purl2cpe | 2026-06-01 10:11:09.882050 |
pkg:rpm/opensuse/php-zendframework |
purl2cpe | 2026-06-01 10:11:09.882051 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-29312 |
vulnerable | 2026-06-08 05:24:58.093186 |
Details available
An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020.
Published: 2023-04-04T00:00:00.000Z
Updated: 2026-07-09T00:12:09.710Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6233 |
vulnerable | 2026-06-08 05:07:59.236432 |
Details available
The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use of the character pattern [\w]* in a regular expression.
Published: 2017-02-16T18:00:00.000Z
Updated: 2024-08-06T01:22:20.678Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4861 |
vulnerable | 2026-06-08 05:07:55.450143 |
Details available
The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.
Published: 2017-02-16T18:00:00.000Z
Updated: 2024-08-06T00:46:38.449Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10034 |
vulnerable | 2026-06-08 05:07:17.061755 |
Details available
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.
Published: 2016-12-30T19:00:00.000Z
Updated: 2024-08-06T03:07:31.976Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7695 |
vulnerable | 2026-06-08 05:07:01.680317 |
Details available
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.
Published: 2016-06-07T14:00:00.000Z
Updated: 2024-08-06T07:58:59.989Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5723 |
vulnerable | 2026-06-08 05:06:50.814847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3154 |
vulnerable | 2026-06-08 05:06:37.319351 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0270 |
vulnerable | 2026-06-08 05:06:14.180132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8089 |
vulnerable | 2026-06-08 05:06:07.237061 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8088 |
vulnerable | 2026-06-08 05:06:07.225660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4914 |
vulnerable | 2026-06-08 05:05:46.413943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4913 |
vulnerable | 2026-06-08 05:05:46.413436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2685 |
vulnerable | 2026-06-08 05:05:29.560885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2684 |
vulnerable | 2026-06-08 05:05:29.560023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2683 |
vulnerable | 2026-06-08 05:05:29.559360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2682 |
vulnerable | 2026-06-08 05:05:29.558655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2681 |
vulnerable | 2026-06-08 05:05:29.552346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4451 |
vulnerable | 2026-06-08 05:02:17.667948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3363 |
vulnerable | 2026-06-08 05:02:09.364822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1939 |
vulnerable | 2026-06-08 04:58:03.152724 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.