Lucene search
+L

12 matches found

Mend
Mend
•added 2017/01/04 8:00 p.m.•3 views

CVE-2016-9137

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curlfile.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during wakeup processing...

9.8CVSS0.05319EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/04 12:00 a.m.•6 views

CVE-2016-9137: Use After Free

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curlfile.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during wakeup processing...

9.8CVSS8.1AI score0.05319EPSS
SaveExploits1References2
Mend
Mend
•added 2016/09/12 1:00 a.m.•5 views

CVE-2016-7134

ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote attackers to cause a denial of service allocation error and heap-based buffer overflow or possibly have unspecified other impact via a long string that is mishandled in a curlescape...

9.8CVSS0.04846EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/09/12 12:00 a.m.•6 views

CVE-2016-7134: Improper Restriction of Operations within the Bounds of a Memory Buffer

ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote attackers to cause a denial of service allocation error and heap-based buffer overflow or possibly have unspecified other impact via a long string that is mishandled in a curlescape...

9.8CVSS8.3AI score0.04846EPSS
SaveExploits0References2
zdt
zdt
•added 2013/12/17 12:00 a.m.•229 views

PHP openssl_x509_parse() Memory Corruption Vulnerability

Exploit for php platform in category dos / poc Overview: Quote from http://www.php.net "PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML." The PHP function opensslx509parse uses a helper function called...

7.5CVSS7.1AI score0.35635EPSS
SaveExploits8
NVD
NVD
•added 2011/08/25 2:22 p.m.•50 views

CVE-2011-3182

PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...

5CVSS7.4AI score0.19152EPSS
SaveExploits2References8
UbuntuCve
UbuntuCve
•added 2011/08/25 12:00 a.m.•53 views

CVE-2011-3182

PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...

5CVSS6.2AI score0.19152EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2011/08/25 12:00 a.m.•4 views

PT-2011-4295

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.7 Description The issue allows context-dependent attackers to cause a denial of service or trigger a buffer overflow by providing an arbitrary value for a function argument. This is related to multiple files, includin...

5CVSS0.19152EPSS
SaveExploits2References12
UbuntuCve
UbuntuCve
•added 2005/11/01 12:47 p.m.•45 views

CVE-2005-3391

Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safemode and openbasedir restrictions via unknown attack vectors in 1 ext/curl and 2 ext/gd...

7.5CVSS7.2AI score0.06903EPSS
SaveExploits0References2
NVD
NVD
•added 2005/11/01 12:47 p.m.•34 views

CVE-2005-3391

Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safemode and openbasedir restrictions via unknown attack vectors in 1 ext/curl and 2 ext/gd...

7.5CVSS6.7AI score0.06903EPSS
SaveExploits0References24
Cvelist
Cvelist
•added 2005/11/01 11:00 a.m.•47 views

CVE-2005-3391

Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safemode and openbasedir restrictions via unknown attack vectors in 1 ext/curl and 2 ext/gd...

6.6AI score0.06903EPSS
SaveExploits0References24
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/01 12:00 a.m.•6 views

CVE-2005-3391: Undefined Security Weakness

Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safemode and openbasedir restrictions via unknown attack vectors in 1 ext/curl and 2 ext/gd...

7.5CVSS5.8AI score0.06903EPSS
SaveExploits0References1
Rows per page
Query Builder