Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-27701

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00625EPSS
Exploits1References3
OSV
OSV
added 2025/08/11 1:54 p.m.1 views

BIT-LIBPHP-2024-2757 PHP mb_encode_mimeheader runs endlessly for some inputs

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS7.1AI score0.00625EPSS
Exploits1References5
OSV
OSV
added 2025/01/14 7:19 p.m.7 views

BIT-PHP-MIN-2024-2757 PHP mb_encode_mimeheader runs endlessly for some inputs

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS7.4AI score0.00625EPSS
Exploits1References5
Redos
Redos
added 2024/08/16 12:0 a.m.17 views

ROS-20240816-09

Vulnerability in mbencodemimeheader function of PHP programming language interpreter is related to uncontrolled resource consumption. uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a deni...

7.5CVSS6.7AI score0.00625EPSS
Exploits1
Microsoft CVE
Microsoft CVE
added 2024/06/30 2:0 p.m.3 views

PHP mb_encode_mimeheader runs endlessly for some inputs

...

7.5CVSS8.5AI score0.00625EPSS
Exploits1
OSV
OSV
added 2024/05/14 7:29 a.m.27 views

BIT-PHP-2024-2757 PHP mb_encode_mimeheader runs endlessly for some inputs

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS7.4AI score0.00625EPSS
Exploits1References5
OSV
OSV
added 2024/04/29 4:15 a.m.1 views

AZL-40055 CVE-2024-2757 affecting package php for versions less than 8.3.6-1

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS7.1AI score0.00625EPSS
Exploits1References1
OSV
OSV
added 2024/04/29 4:15 a.m.26 views

CVE-2024-2757

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS7.4AI score
Exploits0References4
UbuntuCve
UbuntuCve
added 2024/04/29 4:15 a.m.47 views

CVE-2024-2757

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS7.1AI score0.00625EPSS
Exploits1References2
OSV
OSV
added 2024/04/29 4:15 a.m.0 views

UBUNTU-CVE-2024-2757

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS5.8AI score0.00625EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/04/29 3:49 a.m.21 views

CVE-2024-2757 PHP mb_encode_mimeheader runs endlessly for some inputs

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS7.7AI score0.00625EPSS
Exploits1References3
CVE
CVE
added 2024/04/29 3:49 a.m.142 views

CVE-2024-2757

This CVE affects PHP mb_encode_mimeheader() in PHP 8.3.* before 8.3.5, where inputs with long non-space sequences followed by a space can cause the function to run endlessly, leading to potential DoS. The issue is confirmed in multiple sources within the connected documents, which also note a hig...

7.5CVSS7.7AI score0.00625EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/29 3:49 a.m.31 views

CVE-2024-2757 PHP mb_encode_mimeheader runs endlessly for some inputs

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS6.7AI score0.00625EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/04/29 12:0 a.m.1 views

PHP 安全漏洞

PHP is a scripting language for PHP that executes on the server side. A security vulnerability exists in PHP versions 8.3. through prior to 8.3.5, which stems from the function mbencodemimeheader running indefinitely for certain inputs containing long strings of non-space characters followed by...

7.5CVSS8.9AI score0.00625EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2024/04/23 12:0 a.m.535 views

PHP 8.1.x < 8.1.28 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.28, 8.2.x prior to 8.2.18, or 8.3.x prior to 8.3.6. It is, therefore, affected by multiple vulnerabilities: - A command injection via array-ish $command parameter of procopen...

9.4CVSS8.3AI score0.68573EPSS
Exploits6References5
Tenable Nessus
Tenable Nessus
added 2024/04/23 12:0 a.m.890 views

PHP 8.2.x < 8.2.18 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.28, 8.2.x prior to 8.2.18, or 8.3.x prior to 8.3.6. It is, therefore, affected by multiple vulnerabilities: - A command injection via array-ish $command parameter of procopen...

9.4CVSS8.3AI score0.68573EPSS
Exploits6References5
OpenVAS
OpenVAS
added 2024/04/15 12:0 a.m.23 views

PHP 8.3.x < 8.3.6 DoS Vulnerability (GHSA-fjp9-9hwx-59fq) - Linux

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

7.5CVSS7.6AI score0.00625EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2024/04/15 12:0 a.m.26 views

PHP 8.3.x < 8.3.6 DoS Vulnerability (GHSA-fjp9-9hwx-59fq) - Windows

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

7.5CVSS7.6AI score0.00625EPSS
Exploits1References2
Rows per page
Query Builder