CVE-2019-11044

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link function accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access...

CVE-2019-11044 link() silently truncates after a null byte on Windows

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link function accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access...

CVE-2019-11044

Removed by vendor...

PT-2019-5046 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.25 PHP versions 7.3.x through 7.3.12 PHP version 7.4.0 Description: The issue is related to the link function in PHP, which accepts filenames with embedded 0 byte and treats them as terminating at that byte. Thi...

PT-2018-8410

Name of the Vulnerable Software and Affected Versions QNAP versions 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier Description A cross-site scripting XSS issue exists in the share link function of File Station, allowing remote attackers to inject arbitrary web script or HTML. This...

CVE-2017-7631: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML...

PT-2017-17649

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The Binary File Descriptor library is susceptible to an invalid read due to a missing check for null headers in the find link function. This issue can cause utilities like strip to crash. Recommendations F...

PT-2016-7654

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator versions prior to the fixed version Description A memory leak issue exists in the v9fs link function, located in hw/9pfs/9p.c, allowing local guest OS administrators to cause a denial of service by consuming memory. Thi...

Xml eXternal Entity Vulnerability in XML link function of Hitachi COBOL2002

Overview XML link function of Hitachi COBOL2002 contains vulnerabilities to conduct information leakage or cause a denial of service DoS condition. Impact A remote attacker could conduct information leakage or cause a denial of service DoS condition via untrusted XML document loading unexpected...