Vendor

Zend

6 known vulnerabilities.

Products

Zend Framework 3 ZendTo 2 Zend Server 1 ZendPHP 0

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 10.0

CVE-2021-47667 EPSS 36%

An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthent…

Zend ZendTo

Apr 5, 2025
Critical 9.3

CVE-2024-9129

Format String Injection in Zend Server

In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino

Zend Zend Server

Oct 22, 2024
Critical 9.8

CVE-2015-0270

Zend Framework Allows SQL Injection

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

Zend Zend Framework zendframework/zendframework zendframework/zend-db Packagist

Oct 25, 2019