Lucene search
+L

6 matches found

osv_bit
osv_bit
•added 2025/08/11 1:54 p.m.•14 views

BIT-LIBPHP-2024-11236 Integer overflow in the firebird and dblib quoters causing OOB writes

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS7.5AI score0.02065EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/11/24 12:44 a.m.•91 views

CVE-2024-11236 Integer overflow in the firebird and dblib quoters causing OOB writes

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS0.02065EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/11/24 12:44 a.m.•51 views

CVE-2024-11236 Integer overflow in the firebird and dblib quoters causing OOB writes

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS7.5AI score0.02065EPSS
SaveExploits1References1
CVE
CVE
•added 2024/11/24 12:44 a.m.•585 views

CVE-2024-11236

CVE-2024-11236 affects PHP versions with ldap_escape() on 32-bit systems where uncontrolled long inputs can overflow an integer, causing an out-of-bounds write. Affected are PHP 8.1.x before 8.1.31, 8.2.x before 8.2.26, and 8.3.x before 8.3.14. The issue is described in multiple sources, includin...

9.8CVSS7.5AI score0.02065EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/20 12:00 a.m.•16 views

dbl ib Firebird Code Execution

The vulnerability of the dblib and firebird PHP interpreter components is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted data as input to the web application...

10CVSS8.2AI score0.02065EPSS
SaveExploits1References10Affected Software8
Positive Technologies
Positive Technologies
•added 2024/06/07 12:00 a.m.•5 views

PT-2024-40465

Name of the Vulnerable Software and Affected Versions Zend Framework 1 affected versions not specified Description The issue concerns the PDO adapters in Zend Framework 1, which fail to filter null byte values in SQL statements. This oversight allows an attacker to inject arbitrary SQL code by...

9.8CVSS6AI score
SaveExploits0References4
Rows per page
Query Builder