Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 07:39:08 +0000 bdu:2020-00702 https://cve.radiocsirt.org/vuln/bdu:2020-00702 bdu:2020-00702 https://cve.radiocsirt.org/vuln/bdu:2020-00702 cnvd-2019-13250 https://cve.radiocsirt.org/vuln/cnvd-2019-13250 cnvd-2019-13250 https://cve.radiocsirt.org/vuln/cnvd-2019-13250 EUVD-2026-54027 https://cve.radiocsirt.org/vuln/euvd-2026-54027 EUVD-2026-54027 https://cve.radiocsirt.org/vuln/euvd-2026-54027 fkie_cve-2019-10913 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10913 <p>In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.</p> <p>In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10913 GHSA-x92h-wmg2-6hp7 — Invalid HTTP method overrides allow possible XSS or other attacks in Symfony https://cve.radiocsirt.org/vuln/ghsa-x92h-wmg2-6hp7 <p><strong>Affected:</strong> Packagist: symfony/http-foundation, Packagist: symfony/symfony</p> <p>In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.</p> <p><strong>Affected:</strong> Packagist: symfony/http-foundation, Packagist: symfony/symfony</p> <p>In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.</p> https://cve.radiocsirt.org/vuln/ghsa-x92h-wmg2-6hp7 gsd-2019-10913 https://cve.radiocsirt.org/vuln/gsd-2019-10913 gsd-2019-10913 https://cve.radiocsirt.org/vuln/gsd-2019-10913 UBUNTU-CVE-2019-10913 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10913 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: symfony, Ubuntu:Pro:18.04:LTS: symfony</p> <p>In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: symfony, Ubuntu:Pro:18.04:LTS: symfony</p> <p>In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10913