Lucene search
+L

14464 matches found

AlmaLinux
AlmaLinux
•added 2026/01/27 12:00 a.m.•22 views

Important: php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: pgsql extension does not check for errors during escaping CVE-2025-1735 php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 php: PHP Hostname Nul...

8.2CVSS6.8AI score0.01EPSS
SaveExploits6References14
Tenable Nessus
Tenable Nessus
•added 2026/01/27 12:00 a.m.•16 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005104 advisory. In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf ...

7.8CVSS6.3AI score0.00234EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•17 views

weixin4j security vulnerabilities

Weixin4j is a WeChat development toolkit personally developed by Jinyu. Weixin4j has security vulnerabilities, which stem from improper control over sequential memory allocation in the program files CharArrayBuffer.Java and ClassUtil.Java...

6.3CVSS5.8AI score0.00445EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/27 12:00 a.m.•15 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005118 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: Fix array-index-out-of-bounds in diFree Tenable has extracted the preceding description bloc...

7.8CVSS6.1AI score0.00236EPSS
SaveExploits0References3
OSV
OSV
•added 2026/01/27 12:00 a.m.•16 views

ALSA-2026:1429 Important: php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images CVE-2025-14177 php: PHP: Denial of Service...

8.2CVSS6.7AI score0.00697EPSS
SaveExploits4References8
OSV
OSV
•added 2026/01/26 4:39 p.m.•18 views

CLSA-2026-1769445556 php: Fix of CVE-2025-14178

CVE-2025-14178: fix heap buffer overflow in arraymerge due to integer overflow in zendhashnumelements precomputation...

8.2CVSS7.1AI score0.00459EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2026/01/26 1:00 p.m.•14 views

php: heap-based buffer overflow in array_merge()

A flaw was found in PHP. A heap-based buffer overflow occurs in the arraymerge function when the total element count of packed arrays exceeds the 32-bit limit or the internal HTMAXSIZE due to an integer overflow in the precomputation of element counts using the zendhashnumelements function, causi...

8.2CVSS6.9AI score0.00459EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/01/26 1:00 p.m.•20 views

Important: Red Hat Security Advisory: php:8.3 security update

An update for the php:8.3 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.2CVSS6.6AI score0.00697EPSS
SaveExploits2References3
OSV
OSV
•added 2026/01/26 12:36 p.m.•13 views

SUSE-SU-2026:20146-1 Security update for php8

This update for php8 fixes the following issues: Version update to 8.4.16: Security fixes: - CVE-2025-14177: getimagesize function may leak uninitialized heap memory into the APPn segments when reading images in multi-chunk mode bsc1255710. - CVE-2025-14178: heap buffer overflow occurs in...

8.2CVSS6.4AI score0.00697EPSS
SaveExploits4References8
RedHat Linux
RedHat Linux
•added 2026/01/26 12:19 p.m.•10 views

php: heap-based buffer overflow in array_merge()

A flaw was found in PHP. A heap-based buffer overflow occurs in the arraymerge function when the total element count of packed arrays exceeds the 32-bit limit or the internal HTMAXSIZE due to an integer overflow in the precomputation of element counts using the zendhashnumelements function, causi...

8.2CVSS6.9AI score0.00459EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/01/26 12:19 p.m.•19 views

Important: Red Hat Security Advisory: php:8.2 security update

An update for the php:8.2 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.2CVSS6.6AI score0.00697EPSS
SaveExploits2References3
RedHat Linux
RedHat Linux
•added 2026/01/26 11:43 a.m.•22 views

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

8.2CVSS6.6AI score0.00697EPSS
SaveExploits2References3
RedHat Linux
RedHat Linux
•added 2026/01/26 10:37 a.m.•16 views

php: heap-based buffer overflow in array_merge()

A flaw was found in PHP. A heap-based buffer overflow occurs in the arraymerge function when the total element count of packed arrays exceeds the 32-bit limit or the internal HTMAXSIZE due to an integer overflow in the precomputation of element counts using the zendhashnumelements function, causi...

8.2CVSS6.9AI score0.00459EPSS
SaveExploits1References5
Redos
Redos
•added 2026/01/26 12:00 a.m.•15 views

ROS-20260126-73-0036

A vulnerability in the f2fs component of the Linux operating system kernel is related to unchecked array indexing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

7.1CVSS6.5AI score0.00201EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/01/26 12:00 a.m.•17 views

RHEL 9 : php:8.2 (RHSA-2026:1187)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1187 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in...

8.2CVSS6.8AI score0.00697EPSS
SaveExploits2References6
Cvelist
Cvelist
•added 2026/01/24 12:55 a.m.•64 views

CVE-2026-24404 iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, CIccXmlArrayType contains a Null Pointer Dereference and Undefined Behavior vulnerability. This occurs when user-controllable input is unsafely...

7.1CVSS0.00461EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/01/24 12:00 a.m.•10 views

SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2026:0245-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0245-1 advisory. Security fixes: - CVE-2025-14178: heap buffer overflow occurs in arraymerge when the total element count of packed arrays...

8.2CVSS7AI score0.00459EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/01/24 12:00 a.m.•22 views

iccDEV security vulnerability

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.1 contained security vulnerabilities. These vulnerabilities were caused by empty pointer dereferencing and undefined behaviors in CIccXmlArrayType, which...

8.8CVSS6.1AI score0.00461EPSS
SaveExploits1References4
OSV
OSV
•added 2026/01/23 10:36 a.m.•18 views

CLSA-2026-1769164564 php: Fix of CVE-2025-14178

CVE-2025-14178: fix heap buffer overflow in arraymerge by preventing integer overflow in precomputation of element counts...

8.2CVSS7.1AI score0.00459EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/23 10:30 a.m.•16 views

CLSA-2026-1769164237 php: Fix of CVE-2025-14178

CVE-2025-14178: fix heap buffer overflow in arraymerge by correcting integer overflow in precomputation of element counts using zendhashnumelements...

8.2CVSS7.1AI score0.00459EPSS
SaveExploits1References1
Rows per page
Query Builder