Internet Bug Bounty: Out-of-bounds reads in zif_grapheme_stripos with negative offset

https://bugs.php.net/bug.php?id=72061 graphemestripos from the intl extension had a security issue when handling negative offsets, this allowed to read from arbitrary memory locations. Reported to developers on 2016-04-24, fixed 2016-04-29 and released at 2016-04-28, affected PHP 5.5 , 5.6 and 7...

Oracle MySQL 5.5.x < 5.5.45 / 5.6.x < 5.6.26 Multiple Vulnerabilities

Binary data 9235.prm...

Oracle MySQL 5.5.x < 5.5.43 / 5.6.x < 5.6.24 DoS

Binary data 9258.prm...

MySQL 5.6.x < 5.6.29 Multiple DoS

Binary data 9238.prm...

Oracle MySQL 5.6.x < 5.6.25 Multiple Vulnerabilities

Binary data 9255.prm...

Oracle MySQL 5.6.x < 5.6.27 Multiple DoS

Binary data 9236.prm...

Code injection

Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation...

CVE-2016-3171

Removed by vendor...

PHP 5.6.x < 5.6.19 Denial of Service

Binary data 9175.prm...

PHP 5.6.x < 5.6.20 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.20. It is, therefore, affected by multiple vulnerabilities : - A buffer over-write condition exists in the finfoopen function due to improper validation of magic files. An unauthenticated, remote...

cmseasy 5.6 index.php 网站路径泄露漏洞

No description provided by source...

PHP 5.6.x < 5.6.19 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.19. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in file ext/wddx/wddx.c in the phpwddxpopelement function when handling XML data. An unauthenticated,...

PHP 5.6.x < 5.6.18 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.18. It is, therefore, affected by multiple vulnerabilities : - The Perl-Compatible Regular Expressions PCRE library is affected by multiple vulnerabilities related to the handling of regular...

PT-2016-1792 · Mariadb Foundation +8 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: MySQL versions 5.5.47 and earlier MySQL versions 5.6.28 and earlier MySQL versions 5.7.10 and earlier MariaDB versions prior to 5.5.48 MariaDB versions 10.0.x prior to 10.0.24 MariaDB versions 10.1.x prior to 10.1.12 Description: The issue is...

PHP 5.6.x < 5.6.13 Use-After-Free Vulnerability

Binary data 9066.prm...

Ubuntu: Security Advisory (USN-2881-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL 5.6.x < 5.6.28 Multiple Vulnerabilities (January 2016 CPU)

The version of Oracle MySQL installed on the remote host is 5.6.x prior to 5.6.28. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the Client subcomponent. A local attacker can exploit this to execute arbitrary code. CVE-2016-0546 - An unspecified fla...

Oracle MySQL 5.6.x < 5.6.22 DML DoS (January 2016 CPU)

The version of Oracle MySQL installed on the remote host is 5.6.x prior to 5.6.22. It is, therefore, affected by an unspecified flaw in the DML subcomponent. An authenticated, remote attacker can exploit this to cause a denial of service condition. C Tenable Network Security, Inc...

Design/Logic Flaw

Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors...

CVE-2016-0609

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges...