Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

zend / zendopenid CVEs

Beta · best-effort

5 CVEs tagged to zend / zendopenid — 0 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to zend vendor archive

CVE-2014-2684

Published Nov 16, 2014

The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before 1.12.4 does not verify that the openid…

CVSS 6.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-2683

Published Nov 16, 2014

Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_Sli…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-2682

Published Nov 16, 2014

Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_Sli…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-2681

Published Nov 16, 2014

Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_Sli…

CVSS 6.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-2685

Published Sep 4, 2014

The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before 1.12.4 violate the OpenID 2.0 protocol…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1