1753 matches found
The vulnerability of the ext/phar/tar.c component of the PHP programming language interpreter allows a attacker to trigger a service failure or possibly cause other adverse effects.
The vulnerability of the ext/phar/tar.c component in the PHP programming language arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause service interruptions or potentially have other effects using a specially created .TAR archive...
The vulnerability of the ` PharMakeDirstream` function in the PHP interpreter allows a hacker to trigger a service failure or potentially cause other effects.
The vulnerability of the PharMakeDirstream function in the PHP interpreter relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially have other adverse effects...
The vulnerability of the phar_parse_metadata function (ext/phar/phar.c) in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.
The vulnerability of the pharparsemetadata function ext/phar/phar.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions or potentially other adverse effects...
The vulnerability of the phar_parse_tarfile function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the pharparsetarfile function ext/phar/tar.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the phar_parse_zipfile function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the pharparsezipfile function ext/phar/zip.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the phar_parse_pharfile function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the pharparsepharfile function in the PHP programming language is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the ext/phar/phar.c component in the PHP programming language allows a attacker to disclose protected information or cause service failures.
The vulnerability of the ext/phar/phar.c component of the PHP interpreter arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges, disclose sensitive information, or cause service failures...
The vulnerability of the phar_set inode function in the PHP language’s interpreter allows a hacker to execute arbitrary code.
The vulnerability of the pharset inode function in the PHP language interpreter arises due to buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the phar_get_entry_data function in the PHP programming language allows a attacker to cause a service failure or potentially cause other effects.
The vulnerability of the phargetentrydata function in the PHP language interpreter is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause service failures or potentially cause other adverse effects...
Vulnerabilities fixed in MISP
Vulnerabilities have been fixed in MISP. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Cross-Site Scripting XSS. Bypassing authentication Remote code execution Administrator/Root rights For these vulnerabilities, at the time of...
CVE-2022-29528
An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur...
CVE-2022-29528
An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur...
Deserialization of untrusted data
An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur...
CVE-2022-29528
An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur...
CVE-2022-29528
Occurrences across multiple sources confirm CVE-2022-29528: MISP before 2.4.158 is affected by PHAR deserialization. The root cause is PHAR deserialization in MISP; impact and exploit details are not explicitly described in the provided documents beyond the vulnerability description. Affected ver...
CVE-2022-29528
An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur...
PT-2022-19678 · Misp · Misp
Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.158 Description: An issue was discovered in MISP where PHAR deserialization can occur. Recommendations: For versions prior to 2.4.158, update to version 2.4.158 or later to resolve the issue...
MISP 代码问题漏洞
MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability previously existed in MISP version 2.4.158, which stemmed from...
Chamilo LMS server-side request forgery vulnerability
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association that supports the creation of instructional content, remote training, and online question answering. The system supports the creation of instructional content, remote training and online question...