Lucene search
K

6 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.9 views

Astra Linux - уязвимость в php7.3

In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8, when loading PHAR files, insufficient length checking may lead to a stack buffer overflow, potentially causing memory corruption or Remote Code Execution RCE...

9.8CVSS7.2AI score0.29385EPSS
Exploits3References2
Amazon
Amazon
added 2023/09/07 12:0 a.m.3 views

Important: php8.2

Issue Overview: In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it ...

9.8CVSS6.8AI score0.29385EPSS
Exploits4
F5 Networks
F5 Networks
added 2023/02/21 6:32 p.m.146 views

K50602063: PHP vulnerability CVE-2019-9021

Security Advisory Description An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual...

9.8CVSS7.6AI score0.25106EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2020/01/19 9:40 a.m.48 views

CVE-2018-20783

In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to pharparsepharfile in...

7.5CVSS5AI score0.05101EPSS
Exploits1References2
Veracode
Veracode
added 2019/08/20 12:10 a.m.50 views

Information Disclosure

php is vulnerable to information disclosure. A buffer over-read in PHAR reading functions allows an attacker is able to read past allocated buffer in the pharparsepharfile function in ext/phar/phar.c when parsing a .phar file...

7.5CVSS3.9AI score0.05101EPSS
Exploits1References11Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/04/08 12:0 a.m.162 views

SUSE SLES11 Security Update : php53 (SUSE-SU-2019:14013-1)

This update for php53 fixes the following issues : Security issues fixed : CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension bsc1128892. CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory...

9.8CVSS7.2AI score0.52083EPSS
Exploits10References34
Rows per page
Query Builder