2 results (0.002 seconds)

CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-9129 – Format String Injection in Zend Server

https://notcve.org/view.php?id=CVE-2024-9129

In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino • https://portal.perforce.com/s/detail/a91PA000001SYZFYA4 • CWE-134: Use of Externally-Controlled Format String •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2018-10230

https://notcve.org/view.php?id=CVE-2018-10230

Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455. Zend Debugger en Zend Server, en versiones anteriores a la 9.1.3, tiene Cross-Site Scripting (XSS). Esto también se conoce como ZSR-2455. • https://www.synacktiv.com/ressources/zend_server_9_1_3_xss.pdf https://www.zend.com/en/products/server/release-notes • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •