https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 23:15:52 +0000 https://cve.radiocsirt.org/vuln/cve-2018-11407 <p>An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a &#34;null&#34; password and valid username, which triggers an unauthenticated bind. NOTE: this issue exists because of an incomplete fix for CVE-2016-2403.</p> <p>An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a &#34;null&#34; password and valid username, which triggers an unauthenticated bind. NOTE: this issue exists because of an incomplete fix for CVE-2016-2403.</p> https://cve.radiocsirt.org/vuln/cve-2018-11407 https://cve.radiocsirt.org/vuln/usn-4836-1 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: symfony</p> <p>It was discovered that Symfony through the HttpFoundation component allowed unauthorized access on a misconfigured LDAP server. A remote attacker could use this vulnerability to gain unauthorized access.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: symfony</p> <p>It was discovered that Symfony through the HttpFoundation component allowed unauthorized access on a misconfigured LDAP server. A remote attacker could use this vulnerability to gain unauthorized access.</p> https://cve.radiocsirt.org/vuln/usn-4836-1