Lucene search
+L

1767 matches found

CBLMariner
CBLMariner
added 2022/10/05 11:33 p.m.10 views

CVE-2022-1271 affecting package gzip for versions less than 1.12-1

CVE-2022-1271 affecting package gzip for versions less than 1.12-1. An upgraded version of the package is available that resolves this issue...

8.8CVSS9.4AI score0.04271EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.53 views

PHP 8.0.x < 8.0.24 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 7.4.x prior to 7.4.32, 8.0.x prior to 8.0.24, or 8.1.x prior to 8.1.11. It is, therefore, affected by multiple vulnerabilities: - The phar uncompressor code would recursively uncompress quines gzip...

6.5CVSS7.1AI score0.49336EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.74 views

PHP 7.4.x < 7.4.32 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 7.4.x prior to 7.4.32, 8.0.x prior to 8.0.24, or 8.1.x prior to 8.1.11. It is, therefore, affected by multiple vulnerabilities: - The phar uncompressor code would recursively uncompress quines gzip...

6.5CVSS7.1AI score0.49336EPSS
SaveExploits2References3
Prion
Prion
added 2022/09/29 8:15 p.m.21 views

Remote code execution

Discourse is an open source discussion platform. In versions prior to 2.8.9 on the stable branch and prior to 2.9.0.beta10 on the beta and tests-passed branches, admins can upload a maliciously crafted Zip or Gzip Tar archive to write files at arbitrary locations and trigger remote code execution...

5.8CVSS7.3AI score0.01578EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/09/28 11:15 p.m.24 views

CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

5.5CVSS0.00591EPSS
SaveExploits0References8
OSV
OSV
added 2022/09/28 11:15 p.m.1 views

DEBIAN-CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

5.5CVSS6.9AI score0.00591EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/28 11:15 p.m.7 views

UBUNTU-CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

5.5CVSS6.8AI score0.00591EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2022/09/28 11:15 p.m.55 views

CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

5.5CVSS6.8AI score0.00591EPSS
SaveExploits0References6
Prion
Prion
added 2022/09/28 11:15 p.m.106 views

Code injection

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

1.7CVSS7.3AI score0.00591EPSS
SaveExploits0References8Affected Software3
Cvelist
Cvelist
added 2022/09/28 10:25 p.m.76 views

CVE-2022-31628 phar wrapper can occur dos when using quine gzip file

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

2.3CVSS7.9AI score0.00591EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2022/09/28 10:25 p.m.10 views

CVE-2022-31628 phar wrapper can occur dos when using quine gzip file

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

2.3CVSS5.8AI score0.00591EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2022/09/28 10:25 p.m.38 views

CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

5.5CVSS7.7AI score0.00591EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/09/28 10:25 p.m.47 views

CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

5.5CVSS6.7AI score0.00591EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/09/28 12:0 a.m.3 views

PHP 安全漏洞

PHP is a scripting language that executes on the server side. A denial of service vulnerability exists in PHP versions prior to 7.4.31, 8.0.0 and later, 8.0.24 and earlier, and 8.1.0 and later, and 8.1.11 and earlier, which stems from the fact that the phar decompressor code recursively...

5.5CVSS6.6AI score0.00591EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
added 2022/09/27 12:0 a.m.43 views

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.2298)

The version of AHV installed on the remote host is prior to 20201105.2298. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20201105.2298 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant...

8.8CVSS7.3AI score0.50844EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2022/09/26 9:39 a.m.50 views

Moderate: Red Hat Security Advisory: Openshift Logging Bug Fix Release and Security Update (5.3.12)

An update is now available for OpenShift Logging 5.3.12 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

7.5CVSS6.7AI score0.01623EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/09/26 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for xz (EulerOS-SA-2022-2370)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.04271EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/09/26 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for gzip (EulerOS-SA-2022-2382)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.04271EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/09/24 12:0 a.m.37 views

EulerOS Virtualization 2.9.1 : xz (EulerOS-SA-2022-2370)

According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name...

8.8CVSS6.9AI score0.04271EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/09/23 12:0 a.m.17 views

EulerOS Virtualization 2.9.0 : gzip (EulerOS-SA-2022-2382)

According to the versions of the gzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file nam...

8.8CVSS6.9AI score0.04271EPSS
SaveExploits0References2
Rows per page
Query Builder