Lucene search
+L

45 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090639 advisory. In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to acce...

7.5CVSS6.4AI score0.04311EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2016-3261

Malware in sbrugna...

8.2CVSS7.8AI score0.23359EPSS
SaveExploits1References25
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-28201

Malware in sbrugna...

7.5CVSS6.2AI score0.04311EPSS
SaveExploits1References11
OSV
OSV
•added 2025/08/11 1:53 p.m.•12 views

BIT-LIBPHP-2020-7067 OOB Read in urldecode()

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

7.5CVSS7.2AI score0.04311EPSS
SaveExploits1References8
OSV
OSV
•added 2024/03/06 11:06 a.m.•49 views

BIT-PHP-2020-7067 OOB Read in urldecode()

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

7.5CVSS7.5AI score0.04311EPSS
SaveExploits1References8
SUSE CVE
SUSE CVE
•added 2023/02/15 4:01 a.m.•5 views

SUSE CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

7.5CVSS7.7AI score0.04311EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2022/04/21 12:00 a.m.•95 views

Slackware: Security Advisory (SSA:2016-124-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.5AI score0.89058EPSS
SaveExploits8References3
Veracode
Veracode
•added 2020/08/06 9:35 p.m.•36 views

Out-of-bound Read

PHP is vulnerable to out-of-bound read. It is possible when compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

7.5CVSS3.9AI score0.04311EPSS
SaveExploits1References7Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/07/30 12:00 a.m.•63 views

EulerOS 2.0 SP8 : php (EulerOS-SA-2020-1821)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator function...

9.1CVSS7.4AI score0.96107EPSS
SaveExploits12References9
Tenable Nessus
Tenable Nessus
•added 2020/06/17 12:00 a.m.•88 views

EulerOS 2.0 SP2 : php (EulerOS-SA-2020-1632)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, whi...

7.5CVSS6.9AI score0.07083EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2020/06/16 12:00 a.m.•73 views

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2020-1632)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.04311EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/05/15 12:00 a.m.•273 views

Amazon Linux AMI : php72 (ALAS-2020-1367)

The version of php72 installed on the remote host is prior to 7.2.30-1.22. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1367 advisory. In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.34, while parsing EXIF data with exifreaddata...

7.5CVSS7.1AI score0.04311EPSS
SaveExploits3References7
Tenable Nessus
Tenable Nessus
•added 2020/05/15 12:00 a.m.•90 views

Amazon Linux AMI : php73 (ALAS-2020-1368)

The version of php73 installed on the remote host is prior to 7.3.17-1.25. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1368 advisory. In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.34, while parsing EXIF data with exifreaddata...

8.8CVSS7.3AI score0.04883EPSS
SaveExploits4References9
Amazon
Amazon
•added 2020/05/13 12:00 a.m.•120 views

Medium: php73

Issue Overview: In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.34, while parsing EXIF data with exifreaddata function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash...

8.8CVSS7.4AI score0.04883EPSS
SaveExploits4
Amazon
Amazon
•added 2020/05/13 12:00 a.m.•125 views

Medium: php72

Issue Overview: In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.34, while parsing EXIF data with exifreaddata function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash...

7.5CVSS6.7AI score0.04311EPSS
SaveExploits3
OSV
OSV
•added 2020/04/27 9:15 p.m.•43 views

CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

7.5CVSS7.5AI score
SaveExploits0References7
OSV
OSV
•added 2020/04/27 9:15 p.m.•8 views

DEBIAN-CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

7.5CVSS6.4AI score0.04311EPSS
SaveExploits1References1
NVD
NVD
•added 2020/04/27 9:15 p.m.•47 views

CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

7.5CVSS7.5AI score0.04311EPSS
SaveExploits1References7
Mend
Mend
•added 2020/04/27 8:38 p.m.•1 views

CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

8.7CVSS0.04311EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2020/04/27 8:38 p.m.•54 views

CVE-2020-7067 OOB Read in urldecode()

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

7.5CVSS7.5AI score0.04311EPSS
SaveExploits1References7
Rows per page
Query Builder