Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2012-0819

Malware in sbrugna...

5CVSS6AI score0.05037EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.1 views

SUSE CVE-2012-0788

The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service application crash via a crafted application that uses a PDO driver for a fetch and then calls the sessionstart function, as demonstrated by...

5CVSS6.8AI score0.05037EPSS
Exploits0References17
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.38 views

Mageia: Security Advisory (MGASA-2016-0422)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.4AI score0.11241EPSS
Exploits0References5
Veracode
Veracode
added 2019/05/16 2:59 a.m.48 views

Null Pointer Dereference

PHP is vulnerable to null pointer dereference vulnerability. This exists in ext/wddx/wddx.c which allows remote attackers to cause a denial of service via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string...

7.5CVSS8.1AI score0.11241EPSS
Exploits0References12Affected Software1
Prion
Prion
added 2017/01/04 8:59 p.m.33 views

Null pointer dereference

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string...

5CVSS7AI score0.11241EPSS
Exploits0References10Affected Software1
Hacker One
Hacker One
added 2016/11/08 1:57 p.m.20 views

Internet Bug Bounty: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow

bug report at: https://bugs.php.net/bug.php?id=73331 fix commit at: https://github.com/php/php-src/commit/6045de69c7dedcba3eadf7c4bba424b19c81d00d...

6.9AI score
Exploits0
OpenVAS
OpenVAS
added 2012/03/12 12:0 a.m.33 views

Debian: Security Advisory (DSA-2408-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.8AI score0.1067EPSS
Exploits36References3
OpenVAS
OpenVAS
added 2012/02/21 12:0 a.m.83 views

Ubuntu: Security Advisory (USN-1358-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.86573EPSS
Exploits30References4
Prion
Prion
added 2012/02/14 3:55 p.m.17 views

Session fixation

The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service application crash via a crafted application that uses a PDO driver for a fetch and then calls the sessionstart function, as demonstrated by...

5CVSS6.9AI score0.05037EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2012/02/14 3:55 p.m.15 views

CVE-2012-0788

The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service application crash via a crafted application that uses a PDO driver for a fetch and then calls the sessionstart function, as demonstrated by...

5CVSS6.3AI score0.05037EPSS
Exploits0References6
Cvelist
Cvelist
added 2012/02/14 3:0 p.m.13 views

CVE-2012-0788

The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service application crash via a crafted application that uses a PDO driver for a fetch and then calls the sessionstart function, as demonstrated by...

6.2AI score0.05037EPSS
Exploits0References6
CVE
CVE
added 2012/02/14 3:0 p.m.152 views

CVE-2012-0788

CVE-2012-0788 affects PHP prior to 5.3.9. The vulnerability arises from the PDORow implementation not properly coordinating with the session feature, enabling a remote attacker to cause an application crash (DoS) by crafting an application that uses a PDO driver for a fetch and then calls session...

5CVSS6.4AI score0.05037EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2012/02/13 12:0 a.m.39 views

DSA-2408-1 php5 - several

Bulletin has no description...

7.5CVSS8.4AI score0.1067EPSS
Exploits36
OpenVAS
OpenVAS
added 2012/02/13 12:0 a.m.41 views

Ubuntu: Security Advisory (USN-1358-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.86573EPSS
Exploits30References3
Tenable Nessus
Tenable Nessus
added 2012/02/10 12:0 a.m.253 views

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : php5 vulnerabilities (USN-1358-1)

It was discovered that PHP computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. This could allow a remote attacker to cause a denial of service by sending many crafted parameters. CVE-2011-4885 ATTENTION: this update changes previous PHP...

7.5CVSS8.5AI score0.86573EPSS
Exploits30References8
UbuntuCve
UbuntuCve
added 2012/01/20 12:0 a.m.23 views

CVE-2012-0788

The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service application crash via a crafted application that uses a PDO driver for a fetch and then calls the sessionstart function, as demonstrated by...

5CVSS5.9AI score0.05037EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2012/01/13 12:0 a.m.83 views

PHP < 5.3.9 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 5.3.9. As such, it may be affected by the following security issues : - The 'isa' function in PHP 5.3.7 and 5.3.8 triggers a call to 'autoload'. CVE-2011-3379 - It is possible to create a denial of service...

7.5CVSS8.4AI score0.86573EPSS
Exploits31References15
OpenVAS
OpenVAS
added 2012/01/03 12:0 a.m.69 views

PHP < 5.3.9 Multiple DoS Vulnerabilities - Windows

PHP is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if...

5CVSS9.4AI score0.86573EPSS
Exploits16References12
Exploit DB
Exploit DB
added 2011/09/24 12:0 a.m.41 views

PHP PDORow Object - Remote Denial of Service

source: https://www.securityfocus.com/bid/51952/info PHP is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the web server to crash, denying service to legitimate users. PHP 5.3.8 is vulnerable; other versions may also be affected. fetchPDO::FETCHLAZ...

7.4AI score
Exploits0
Rows per page
Query Builder