540 matches found
Medium: php70
Issue Overview: Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image. CVE-2016-10168 In all versions of PHP 7, during the unserialization...
openSUSE Security Update : php7 (openSUSE-2017-304)
This update for php7 fixes the following security issues : - CVE-2016-7480: The SplObjectStorage unserialize implementation in ext/spl/splobserver.c in PHP did not verify that a key is an object, which allowed remote attackers to execute arbitrary code or cause a denial of service uninitialized...
openSUSE: Security Advisory for php7 (openSUSE-SU-2017:0588-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE-SU-2017:0534-1 Security update for php7
This update for php7 fixes the following security issues: - CVE-2016-7480: The SplObjectStorage unserialize implementation in ext/spl/splobserver.c in PHP did not verify that a key is an object, which allowed remote attackers to execute arbitrary code or cause a denial of service uninitialized...
PT-2017-16555
Name of the Vulnerable Software and Affected Versions GeniXCMS versions 0.0.0 through 0.0.8 Description The issue concerns the media rename feature, which fails to account for alternative PHP file extensions when checking uploaded files for PHP content. This allows users to rename and execute fil...
CVE-2017-5520: Unrestricted Upload of File with Dangerous Type
The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the .php6, .php7 and .phtml extensions...
openSUSE Security Update : php7 (openSUSE-2017-61)
This update for php7 fixes the following issues : - CVE-2016-9933 Possible stack overflow on truecolor images handling bsc1015187 - CVE-2016-9934 Dereference from NULL pointer could lead to crash bsc1015188 - CVE-2016-9935 Invalid read could lead to crash bsc1015189 - CVE-2016-9936 Use After free...
openSUSE Security Update : php7 (openSUSE-2016-1440) (httpoxy)
This update for php7 fixes the following security issues : - CVE-2016-5385: Setting HTTPPROXY environment variable via Proxy header httpoxy bsc988486. - CVE-2016-9137: Fixing a Use After Free in unserialize bsc1008029. This update was imported from the SUSE:SLE-12:Update update project...
CVE-2016-9836
The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the ".php6", ".php7", ".phtml", and ".phpt" extensions...
PT-2016-7836
Name of the Vulnerable Software and Affected Versions Joomla! CMS versions prior to 3.6.5 Description The issue concerns the file scanning mechanism in Joomla! CMS, specifically the JFilterInput::isFileSafe function, which fails to account for alternative PHP file extensions when checking uploade...
SUSE-SU-2016:2941-1 Security update for php7
This update for php7 fixes the following security issues: - CVE-2016-5385: Setting HTTPPROXY environment variable via Proxy header httpoxy bsc988486. - CVE-2016-9137: Fixing a Use After Free in unserialize bsc1008029...
Internet Bug Bounty: Use After Free in PHP7 unserialize()
The bug reported at: https://bugs.php.net/bug.php?id=72978...
SUSE-SU-2016:2683-1 Security update for php7
This update for php7 fixes the following security issue: - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...
SUSE-SU-2016:2683-2 Security update for php7
This update for php7 fixes the following security issue: - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...
SUSE-SU-2016:2460-1 Security update for php7
This update for php7 fixes the following security issues: CVE-2016-6128: Invalid color index not properly handled bsc987580 CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 CVE-2016-6292: Null pointer dereference in exifprocessusercomment...
SUSE-SU-2016:2460-2 Security update for php7
This update for php7 fixes the following security issues: CVE-2016-6128: Invalid color index not properly handled bsc987580 CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 CVE-2016-6292: Null pointer dereference in exifprocessusercomment...
PHP7 Unserialization Use After Free
A Use-After-Free vulnerability exists in the Standard PHP library's unserializion of array objects, due to an internal array self-reference. An attacker could exploit this vulnerability by supplying crafted input to a PHP application. Successful exploitation may result in remote execution of...
FreeBSD : php7 -- multiple vulnerabilities (5af511e5-e928-11e5-92ce-002590263bf5)
The PHP Group reports : - Core : - Fixed bug 71637 Multiple Heap Overflow due to integer overflows in xml/filterurl/addcslashes. - SOAP : - Fixed bug 71610 Type Confusion Vulnerability - SOAP / makehttpsoaprequest. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
CakePHP 2.6.13, 2.7.11, 2.8.2, 3.0.17, 3.1.12, and 3.2.5 Released
CakePHP 2.6.13, 2.7.11, 2.8.2, 3.0.17, 3.1.12, and 3.2.5 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 2.6.13, 2.7.11, 2.8.2, 3.0.17, 3.1.12, and 3.2.5. These releases contain security fixes. 3.2.5 and 2.8.2 also contain bugfixes. Security Fixes These...
