Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2015-4598
HistoryMay 16, 2016 - 10:00 a.m.

CVE-2015-4598

2016-05-1610:00:00
redhat
www.cve.org
6

AI Score

7.6

Confidence

Low

EPSS

0.007

Percentile

79.7%

JSON

PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\0.html attack that bypasses an intended configuration in which client users may write to only .html files.

Related

cve 1
prion 1
nvd 1
ubuntucve 1
nessus 26
f5 2
openvas 22
mageia 1
securityvulns 3
debian 3
redhat 5
osv 2
oraclelinux 4
suse 5
ibm 5
veracode 7
ubuntu 1
centos 2
cloudlinux 1
rosalinux 1
cve
cve
CVE-2015-4598
2016-05-16 10:59:05
prion
prion
Design/Logic Flaw
2016-05-16 10:59:00
nvd
nvd
CVE-2015-4598
2016-05-16 10:59:05
ubuntucve
ubuntucve
CVE-2015-4598
2015-06-17 00:00:00
nessus
nessus
F5 Networks BIG-IP : PHP vulnerability (K17049)
2016-10-10 00:00:00
Debian DSA-3344-1 : php5 - security update
2015-08-28 00:00:00
PHP 5.5.x < 5.5.26 / 5.6.x < 5.6.10 Multiple Vulnerabilities
2015-06-18 00:00:00
f5
f5
K17049 : PHP vulnerability CVE-2015-4598
2015-08-07 00:00:00
SOL17049 - PHP vulnerability CVE-2015-4598
2015-08-07 00:00:00
openvas
openvas
PHP Multiple Vulnerabilities - 05 (Aug 2016) - Linux
2016-08-31 00:00:00
Mageia: Security Advisory (MGASA-2015-0258)
2022-01-28 00:00:00
PHP Multiple Vulnerabilities - 05 (Aug 2016) - Windows
2016-08-31 00:00:00
mageia
mageia
Updated php package fixes security vulnerability
2015-07-05 20:22:03
securityvulns
securityvulns
[SECURITY] [DSA 3344-1] php5 security update
2015-08-31 00:00:00
[USN-2658-1] PHP vulnerabilities
2015-07-13 00:00:00
PHP multiple security vulnerabilities
2015-07-13 00:00:00
debian
debian
[SECURITY] [DSA 3344-1] php5 security update
2015-08-27 15:00:09
[SECURITY] [DSA 3344-1] php5 security update
2015-08-27 15:00:09
[SECURITY] [DLA 307-1] php5 security update
2015-09-07 20:21:46
redhat
redhat
(RHSA-2015:1219) Moderate: php54-php security update
2015-07-09 00:00:00
(RHSA-2015:1187) Important: rh-php56-php security update
2015-06-25 00:00:00
(RHSA-2015:1186) Important: php55-php security update
2015-06-25 00:00:00
osv
osv
php5 - security update
2015-08-27 00:00:00
php5 - security update
2015-09-07 00:00:00
oraclelinux
oraclelinux
php54-php security update
2016-02-04 00:00:00
php55-php security update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
suse
suse
Security update for PHP (important)
2015-07-17 20:09:41
Security update for php5 (important)
2015-07-06 10:05:40
Security update for php5 (important)
2015-07-17 11:08:12
ibm
ibm
Security Bulletin: IBM Tealeaf Customer Experience PCA Web UI PHP security issues
2018-06-16 19:50:01
Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manger (FSM)
2019-01-31 02:10:01
Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Management Module
2019-01-31 02:25:02
veracode
veracode
Arbitrary File Write
2019-05-02 05:39:55
Improper Input Validation
2019-05-02 05:39:56
Heap-based Buffer Overflow
2019-05-02 05:39:55
ubuntu
ubuntu
PHP vulnerabilities
2015-07-06 00:00:00
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

AI Score

7.6

Confidence

Low

EPSS

0.007

Percentile

79.7%

JSON
Related for CVELIST:CVE-2015-4598
cve1prion1nvd1ubuntucve1nessus26f52openvas22mageia1securityvulns3debian3redhat5osv2oraclelinux4suse5ibm5veracode7ubuntu1centos2cloudlinux1rosalinux1