CVE-2025-6491

In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server...

FreeBSD Ports: pear-PEAR

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: pear-PEAR

The remote host is missing an update to the system as announced in the referenced advisory. VID 44e5f5bd-4d76-11da-bf37-000fb586ba73 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD : pear-PEAR -- PEAR installer arbitrary code execution vulnerability (44e5f5bd-4d76-11da-bf37-000fb586ba73)

Gregory Beaver reports : A standard feature of the PEAR installer implemented in all versions of PEAR can lead to the execution of arbitrary PHP code upon running the 'pear' command or loading the Web/Gtk frontend. To be vulnerable, a user must explicitly install a publicly released malicious...