MiracleLinux 9 : php:8.3 (AXSA:2026-1549:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1549:01 advisory. php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD CVE-2026-14355 Tenable has extracted the preceding...

php:8.3 security, bug fix, and enhancement update

An update is available for module.php-pecl-redis6, php, module.php-pecl-rrd, php-pecl-apcu, module.php-pecl-apcu, php-pecl-zip, php-pecl-rrd, module.php, module.php-pecl-zip, php-pecl-redis6, php-pecl-xdebug3, module.php-pecl-xdebug3. This update affects Rocky Linux 9. A Common Vulnerability...

K000162459: PHP vulnerabilities CVE-2026-12184 and CVE-2026-14355

Security Advisory Description CVE-2026-12184 The cve record for the cve id does not exist. CVE-2026-14355 In PHP versions 8.2. before 8.2.32, 8.3. before 8.3.32, 8.4. before 8.4.23, 8.5. before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw...

USN-8564-1 php8.1, php8.3, php8.5 vulnerabilities

It was discovered that PHP incorrectly handled certain TLS setup failures, resulting in a NULL pointer dereference. An attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. CVE-2026-12184 It was discovered that P...

Amazon Linux 2023 : php8.3, php8.3-bcmath, php8.3-cli (ALAS2023-2026-1961)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1961 advisory. PHP: Failure to setup TLS with a remote server can result in a remote DoS CVE-2026-12184 PHP: ext/openssl: Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD...

Medium: php8.3

Issue Overview: PHP: Failure to setup TLS with a remote server can result in a remote DoS CVE-2026-12184 PHP: ext/openssl: Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 Affected Packages: php8.3 Issue Correction: Run dnf update php8.3 --releasever...

OESA-2026-3049 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2026-3051 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

CVE-2026-12184

creationtimestamp| type| source ---|---|--- 2026-07-06 02:41:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpx2vw7sur2a 2026-07-07 13:55:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq2qypnlfq2i 2026-08-01 22:19:43+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-12184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - PHP: Failure to setup TLS with a remote server can result in a remote DoS CVE-2026-12184 Note that Nessus relies on the presence of the package a...

CVE-2026-12184

PHP: Failure to setup TLS with a remote server can result in a remote DoS...

BELL-CVE-2026-12184

Bulletin has no description...

PT-2026-55875

Name of the Vulnerable Software and Affected Versions PHP version 8.2 Description A failure to establish a TLS handshake the process where a client and server authenticate each other and establish encryption keys with a remote server can lead to a Denial of Service DoS condition. Recommendations ...

CVE-2025-12184

creationtimestamp| type| source ---|---|--- 2025-11-04 15:36:04+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4suf7ogxmj2 2025-11-04 16:21:37+00:00| seen| https://gist.github.com/Darkcrai86/d6a37014331756915af12b3fe18b7a9b 2025-11-04 17:52:18+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2017-12184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute...

CVE-2024-12184

creationtimestamp| type| source ---|---|--- 2025-02-01 04:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3np5fh7m2i 2025-02-01 05:25:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3714 2025-02-01 07:16:31+00:00| seen|...

CVE-2024-12184 WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accuaformsdownloadsubmittedfile function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to download...

BELL-CVE-2017-12184 CVE-2017-12184 does not affect BellSoft software

Bulletin has no description...

CVE-2018-12184

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none...

Mageia: Security Advisory (MGASA-2017-0401)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...