Lucene search
K

30 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-7829

Malware in sbrugna...

7.5CVSS7.6AI score0.08257EPSS
Exploits2References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-2780

Malware in sbrugna...

7.5CVSS8.1AI score0.07713EPSS
Exploits0References15
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.20 views

Linux Distros Unpatched Vulnerability : CVE-2017-11145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelibmeridian parsing code could be used by attackers able t...

7.5CVSS6.6AI score0.07713EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.24 views

Linux Distros Unpatched Vulnerability : CVE-2017-16642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directiv...

7.5CVSS6.3AI score0.08257EPSS
Exploits2References2
F5 Networks
F5 Networks
added 2023/02/21 6:59 p.m.161 views

K06420357: PHP vulnerability CVE-2017-16642

Security Advisory Description In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related...

7.5CVSS6.3AI score0.08257EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2020/05/01 12:0 a.m.96 views

EulerOS Virtualization for ARM 64 3.0.2.0 : php (EulerOS-SA-2020-1542)

According to the versions of the php packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated we...

8.1CVSS7.3AI score0.08946EPSS
Exploits8References11
OpenVAS
OpenVAS
added 2020/04/30 12:0 a.m.58 views

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2020-1542)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.9AI score0.08946EPSS
Exploits8References2
CVE
CVE
added 2020/02/04 7:8 p.m.60 views

CVE-2020-8122

CVE-2020-8122 affects Nextcloud Server 14.0.3, where a missing authorization check on share expiration updates lets a recipient extend the expiration date of a share they received. The root cause is an inadequate validation of the requester as the owner when modifying a share’s expiration. This v...

4.3CVSS4.7AI score0.00275EPSS
Exploits1References2Affected Software1
Veracode
Veracode
added 2019/05/16 2:59 a.m.37 views

Information Disclosure

PHP is vulnerable to information disclosure vulnerability. This is because an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to...

7.5CVSS8.1AI score0.08257EPSS
Exploits2References15Affected Software2
Veracode
Veracode
added 2019/05/16 2:59 a.m.39 views

Information Disclosure

PHP is vulnerable to information disclosure attacks. A remote user could trigger an information leak in the date extension's timelibmeridian parsing code to obtain potentially sensitive information from the interpreter...

7.5CVSS8.1AI score0.07713EPSS
Exploits0References15Affected Software1
RedHat Linux
RedHat Linux
added 2018/05/03 5:6 a.m.1 views

php: Out-of-bound read in timelib_meridian()

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c...

7.5CVSS7.1AI score0.08257EPSS
Exploits2References4
RedhatCVE
RedhatCVE
added 2017/11/10 6:50 p.m.50 views

CVE-2017-16642

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c...

7.5CVSS2.5AI score0.08257EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2017/11/09 12:0 a.m.75 views

PHP < 5.6.32, 7.x < 7.0.24, 7.1.x < 7.1.11 Heap Based Buffer Overflow Vulnerability - Linux

PHP is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

7.5CVSS8.1AI score0.08257EPSS
Exploits2References4
NVD
NVD
added 2017/11/07 9:29 p.m.36 views

CVE-2017-16642

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c...

7.5CVSS8.3AI score0.08257EPSS
Exploits2References13
Prion
Prion
added 2017/11/07 9:29 p.m.39 views

Out-of-bounds

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c...

5CVSS8AI score0.08257EPSS
Exploits2References13Affected Software3
OSV
OSV
added 2017/11/07 9:29 p.m.41 views

CVE-2017-16642

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c...

7.5CVSS6.2AI score
Exploits0References13
CVE
CVE
added 2017/11/07 9:0 p.m.514 views

CVE-2017-16642

CVE-2017-16642 is a PHP core timelib_meridian parsing bug in ext/date/lib/parse_date.c causing out-of-bounds reads. Affected are PHP versions before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11. The issue can leak information from the interpreter if attackers supply crafted date strings. Th...

7.5CVSS8.2AI score0.08257EPSS
Exploits2References13Affected Software1
Debian CVE
Debian CVE
added 2017/11/07 9:0 p.m.57 views

CVE-2017-16642

Removed by vendor...

7.5CVSS8AI score0.08257EPSS
Exploits2
Cvelist
Cvelist
added 2017/11/07 9:0 p.m.42 views

CVE-2017-16642

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c...

8.4AI score0.08257EPSS
Exploits2References13
UbuntuCve
UbuntuCve
added 2017/11/07 12:0 a.m.46 views

CVE-2017-16642

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c...

7.5CVSS6.7AI score0.08257EPSS
Exploits2References4
Rows per page
Query Builder