Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Zend vulnerabilities

4 published CVEs name Zend among the affected products.

Published CVEs
4
Last 12 months
0
Critical
3
Known exploited
0

Critical 3High 0Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20191
  2. 20241
  3. 20252

Newest CVEs

  • CVE-2025-32352

    A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords…

    Zend · ZendTo

    Medium4.8
  • CVE-2021-47667

    An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute…

    Zend · ZendTo

    Critical10.0
  • CVE-2024-9129

    Format String Injection in Zend Server

    Zend · Zend Server

    Critical9.3
  • CVE-2015-0270

    Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

    Zend · Zend Framework

    Critical9.8