Lucene search
+L

20 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-53508

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.0047EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•24 views

Linux Distros Unpatched Vulnerability : CVE-2017-11145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelibmeridian parsing code could be used by attackers able t...

7.5CVSS6.6AI score0.04812EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/08 4:33 a.m.•11 views

CVE-2024-57063

A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.7AI score0.0047EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/02/05 10:41 p.m.•4 views

Prototype Pollution

Overview org.webjars.npm:php-date-formatter is an A Javascript datetime formatting and manipulation library using PHP date-time formats. Affected versions of this package are vulnerable to Prototype Pollution in php-date-formatter.js. Details Prototype Pollution is a vulnerability affecting...

7.5CVSS8AI score0.0047EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/02/05 10:41 p.m.•4 views

Prototype Pollution

Overview org.webjars.bower:php-date-formatter is an A Javascript datetime formatting and manipulation library using PHP date-time formats. Affected versions of this package are vulnerable to Prototype Pollution in php-date-formatter.js. Details Prototype Pollution is a vulnerability affecting...

7.5CVSS8AI score0.0047EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/02/05 10:41 p.m.•2 views

Prototype Pollution

Overview org.webjars.bowergithub.kartik-v:php-date-formatter is an A Javascript datetime formatting and manipulation library using PHP date-time formats. Affected versions of this package are vulnerable to Prototype Pollution in php-date-formatter.js. Details Prototype Pollution is a vulnerabilit...

7.5CVSS8AI score0.0047EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2025/02/05 10:41 p.m.•7 views

org.webjars.bower:datetimepicker (>=2.4.7, <=2.5.20), org.webjars.bower:github-com-xdan-datetimepicker (2.5.4) potentially affected by CVE-2024-57063 via org.webjars.bower:php-date-formatter (1.3.5)

org.webjars.bower:php-date-formatter MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bower:php-date-formatter and may be impacted: - org.webjars.bower:datetimepicker =2.4.7, =2.5.20 -...

7.5CVSS5.3AI score0.0047EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/02/05 10:41 p.m.•10 views

org.webjars.npm:github-com-xdan-datetimepicker (2.5.20), org.webjars.npm:jquery-datetimepicker (>=2.5.4, <=2.5.21) potentially affected by CVE-2024-57063 via org.webjars.npm:php-date-formatter (1.3.6)

org.webjars.npm:php-date-formatter MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:php-date-formatter and may be impacted: - org.webjars.npm:github-com-xdan-datetimepicker 2.5.20 - org.webjars.npm:jquery-datetimepick...

7.5CVSS5.3AI score0.0047EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/02/05 10:41 p.m.•10 views

org.webjars.bowergithub.xdan:datetimepicker (2.5.20) potentially affected by CVE-2024-57063 via org.webjars.bowergithub.kartik-v:php-date-formatter (1.3.6)

org.webjars.bowergithub.kartik-v:php-date-formatter MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.kartik-v:php-date-formatter and may be impacted: - org.webjars.bowergithub.xdan:datetimepicker 2.5.20 Source...

7.5CVSS5.3AI score0.0047EPSS
SaveExploits0
NVD
NVD
•added 2025/02/05 10:15 p.m.•21 views

CVE-2024-57063

A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS0.0047EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/05 12:00 a.m.•22 views

CVE-2024-57063

A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

0.0047EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/05 12:00 a.m.•8 views

CVE-2024-57063

A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

6.7AI score0.0047EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/05 12:00 a.m.•69 views

CVE-2024-57063

The php-date-formatter JavaScript library (specifically version v1.3.6 ) is vulnerable to Prototype Pollution within the lib function. This vulnerability occurs when an attacker supplies a crafted payload to manipulate global object prototypes, such as __proto__, constructor, or prototype. By inj...

7.5CVSS6.4AI score0.0047EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/05 12:00 a.m.•2 views

CVE-2024-57063: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS5.8AI score0.0047EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/05 12:00 a.m.•3 views

PT-2025-5763

Name of the Vulnerable Software and Affected Versions: php-date-formatter version 1.3.6 Description: A prototype pollution in the lib function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For php-date-formatter version 1.3.6, consider disabli...

7.5CVSS0.0047EPSS
SaveExploits0References3
Mend
Mend
•added 2025/02/05 12:00 a.m.•3 views

CVE-2024-57063

A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

8.7CVSS0.0047EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/02/15 5:23 a.m.•6 views

SUSE CVE-2015-0273

Multiple use-after-free vulnerabilities in ext/date/phpdate.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a 1 R or 2 r type specifier in a DateTimeZone data handled by the...

7.5CVSS8.2AI score0.43815EPSS
SaveExploits9References8
attackerkb
attackerkb
•added 2017/11/07 9:29 p.m.•33 views

CVE-2017-16642

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c...

7.5CVSS5.6AI score0.26373EPSS
SaveExploits3References16
BDU FSTEC
BDU FSTEC
•added 2016/07/07 12:00 a.m.•10 views

The vulnerability of the PHP interpreter, which allows a remote attacker to execute arbitrary code

The multiple vulnerabilities of the PHP interpreter are located in the ext/date/phpdate.c component. These vulnerabilities involve the use of memory after it has been freed. As a result of exploiting these vulnerabilities by a malicious actor operating remotely, arbitrary code can be executed usi...

7.5CVSS7AI score0.43815EPSS
SaveExploits9References3Affected Software1
Positive Technologies
Positive Technologies
•added 2012/02/14 12:00 a.m.•6 views

PT-2012-1224

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.9 Description The issue is related to a memory leak in the timezone functionality, which can be exploited by remote attackers to cause a denial of service due to memory consumption. This is achieved by triggering many...

5CVSS0.07966EPSS
SaveExploits2References52
Rows per page
Query Builder