The vulnerability of the Django library for the Python programming language, which allows attackers to compromise the integrity of protected information

The vulnerability of the Django library for the Python programming language is related to insufficient elimination of special elements in the output data used by the lower-level component. Exploiting this vulnerability can allow a malicious actor to cause service failures...

UBUNTU-CVE-2018-16875

The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients a...

PHP has an unspecified vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

UBUNTU-CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

Google Golang Go Denial of Service Vulnerability

Google Golang Go is a programming language optimized for programming applications on multiprocessor systems by Google. A security vulnerability exists in Google Golang Go versions 1.7.3 and 1.6.3. An attacker can cause a denial of service file descriptor exhaustion by sending a specially crafted...

PHP heap buffer overflow vulnerability (CNVD-2017-33481)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A he...

TeamPass SQL Injection Vulnerability (CNVD-2017-11316)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A SQL injection vulnerability exists in the users.queries.php file in versions of TeamPass prior to 2.1.27.4. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

Dup Scout Enterprise '.xml' Local Buffer Overflow Vulnerability

Dup Scout Enterprise is an easy-to-use file removal tool that finds and removes all duplicate files from your computer's individual disks and NAS storage devices. Dup Scout Enterprise suffers from a local buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

PHP Denial of Service Vulnerability (CNVD-2017-05493)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

Subrion CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-04654)

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site request forgery vulnerability exists in admin/languages/edit/1/URI in Subrion CMS version...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to bypass access control rules.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass access control rules using a specially crafted HTTP request...

PHP Denial of Service Vulnerability (CNVD-2017-01943)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

Kajona Directory Traversal Vulnerability

Kajona is an open source CMS written in PHP. A directory traversal vulnerability exists in Kajona version 4.7. An attacker can exploit this vulnerability to obtain information about files present on the system...

PHP gdImageWebpCtx Function Heap Overflow Vulnerability

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A heap overflow vulnerability exists in the PHP gdImageWebpCtx function, which allows remote attackers to exploit the vulnerability to execute arbitrary code...

PHP 'ext/standard/string.c' Information Disclosure Vulnerability

PHP is an open source general-purpose computer scripting language. An information disclosure vulnerability exists in PHP 'ext/standard/string.c', which allows attackers to exploit the vulnerability to obtain sensitive information or launch further attacks...

The vulnerability of the PHP interpreter allows a hacker to gain access to read files.

The vulnerability of the PHP interpreter lies in the lack of checks for the sequence “%00” in the path name. Exploiting this vulnerability allows an attacker, operating remotely, to read arbitrary files using specially crafted input data for the application that calls the function...

UBUNTU-CVE-2015-8879

The odbcbindcols function in ext/odbc/phpodbc.c in PHP before 5.6.12 mishandles driver behavior for SQLWVARCHAR columns, which allows remote attackers to cause a denial of service application crash in opportunistic circumstances by leveraging use of the odbcfetcharray function to access a certain...

PHP Man-in-the-Middle Attack Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability exists in the MySQL native driver for PHP, which can be exploited by an attacker to perform a man-in-the-middle attack,...

The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.

The vulnerability of the SPL library implementation in ext/spl/splarray.c of the PHP interpreter lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted data...

The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.

The vulnerability of the phpstrReplaceInSubject function ext/standard/string.c in the PHP interpreter is related to errors in the code. Exploiting this vulnerability allows an attacker to execute arbitrary code by entering special parameters remotely...