210 matches found
SUSE CVE-2026-33204
SimpleJWT is a simple JSON web token library written in PHP. Prior to version 1.1.1, an unauthenticated attacker can perform a Denial of Service via JWE header tampering when PBES2 algorithms are used. Applications that call JWE::decrypt on attacker-controlled JWEs using PBES2 algorithms are...
CLSA-2026-1772120065 php: Fix of CVE-2017-8923
CVE-2017-8923: fix integer overflow when concatenating strings...
CLSA-2026-1769686676 php: Fix of 2 CVEs
CVE-2025-1220: add null byte validation and fix hostname formatting to prevent null byte truncation that could bypass hostname access checks - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP Extension via Large XML namespace prefix...
CLSA-2026-1768300005 php: Fix of CVE-2025-14178
CVE-2025-14178: fix integer overflow in the precomputation of element counts using zendhashnumelements...
PT-2026-33338
Name of the Vulnerable Software and Affected Versions Protobuf PHP versions prior to 5.34.0-RC1 Protobuf PHP versions prior to 4.33.6 Description A Denial of Service DoS issue exists during the parsing of untrusted input. Maliciously structured messages, specifically those containing negative...
Security update for icinga-php-library, icingaweb2 (moderate)
openSUSE Security Update: Security update for icinga-php-library, icingaweb2 Announcement ID: openSUSE-SU-2025:0473-1 Rating: moderate References: Cross-References: CVE-2025-27404 CVE-2025-27405 CVE-2025-27609 CVE-2025-30164 CVSS scores: CVE-2025-27404 SUSE: 7.6...
CVE-2025-14761
Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgra...
UBUNTU-CVE-2025-14761
Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgra...
EUVD-2019-4737
Malware in sbrugna...
EUVD-2012-5665
Malware in sbrugna...
EUVD-2019-4738
Malware in sbrugna...
EUVD-2004-2581
Malware in sbrugna...
EUVD-2006-1021
Malware in sbrugna...
EUVD-2006-4962
Malware in sbrugna...
EUVD-2007-4718
Malware in sbrugna...
EUVD-2012-5669
Malware in sbrugna...
EUVD-2024-2677
Malicious code in bioql PyPI...
EUVD-2022-6251
Malicious code in bioql PyPI...