Lucene search
K

31 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-5868

Malware in sbrugna...

6.4CVSS6AI score0.06231EPSS
Exploits0References41
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-27618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iconv function in the GNU C Library aka glibc or libc6 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388,...

5.5CVSS6.5AI score0.0005EPSS
Exploits1References2
F5 Networks
F5 Networks
added 2023/02/21 6:53 p.m.51 views

K83181523: PHP vulnerability CVE-2018-10546

Security Advisory Description An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences. CVE-2018-10546 Impact There is no...

7.5CVSS7AI score0.64864EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.2 views

SUSE CVE-2007-5898

The 1 htmlentities and 2 htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465...

6.4CVSS7AI score0.06231EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:28 a.m.1 views

SUSE CVE-2018-10546

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences...

5.3CVSS8.4AI score0.64864EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2021/05/18 1:52 p.m.3 views

glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

A flaw was found in glibc. If an attacker provides the iconv function with invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, IBM1399 encodings, it fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service...

5.5CVSS6.8AI score0.0005EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/02/26 12:0 a.m.2 views

GNU C Library security vulnerability

The GNU C Library glibc, libc6 is an open source, free C language compiler released under the LGPL license. A security vulnerability exists in the GNU C Library that originates when processing invalid multibyte input sequences IBM1364, IBM1371, IBM1388, IBM1390, IBM1399 encoding, which could lead...

5.5CVSS6.8AI score0.0005EPSS
Exploits1References46
RedhatCVE
RedhatCVE
added 2020/01/24 4:0 p.m.53 views

CVE-2018-10546

An infinite loop vulnerability was found in ext/iconv/iconv.c in PHP due to the iconv stream not rejecting invalid multibyte sequences. A remote attacker could use this vulnerability to hang the php process and consume resources...

7.5CVSS1.9AI score0.64864EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.37 views

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2018-1309)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.64864EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.33 views

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1249)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.64864EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2019/02/22 11:0 p.m.43 views

CVE-2019-9023

Removed by vendor...

9.8CVSS8.7AI score0.10503EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2018/05/15 12:0 a.m.65 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-3646-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3646-1 advisory. It was discovered that PHP incorrectly handled opcache access controls when configured to use PHP-FPM. A local user could possibl...

8.8CVSS6.4AI score0.64864EPSS
Exploits0References6
CNVD
CNVD
added 2018/05/03 12:0 a.m.1 views

PHP ext/iconv/iconv.c Denial of Service Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

7.5CVSS6.6AI score0.64864EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2018/04/29 9:0 p.m.43 views

CVE-2018-10546

Removed by vendor...

7.5CVSS8.2AI score0.64864EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2018/04/29 9:0 p.m.46 views

CVE-2018-10546

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences...

7.5CVSS7.2AI score0.64864EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2018/04/29 12:0 a.m.40 views

CVE-2018-10546

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences...

7.5CVSS6.8AI score0.64864EPSS
Exploits0References4
OSV
OSV
added 2018/04/29 12:0 a.m.0 views

UBUNTU-CVE-2018-10546

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences...

7.5CVSS6.8AI score0.64864EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2010/02/24 12:0 a.m.70 views

Debian DSA-1889-1 : icu - programming error

It was discovered that the ICU unicode library performed incorrect processing of invalid multibyte sequences, resulting in potential bypass of security mechanisms. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debia...

4.3CVSS6.1AI score0.11643EPSS
Exploits0References2
securityvulns
securityvulns
added 2009/09/18 12:0 a.m.45 views

[SECURITY] [DSA 1889-1] New icu packages correct multibyte sequence parsing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1889-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 16, 2009 http://www.debian.org/security/faq -...

4.3CVSS0.3AI score0.11643EPSS
Exploits0
OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.39 views

Ubuntu Update for php5 vulnerabilities USN-549-1

Ubuntu Update for Linux kernel vulnerabilities USN-549-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5491.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 vulnerabilities USN-549-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

7.5CVSS0.7AI score0.25241EPSS
Exploits2References2
Rows per page
Query Builder