141 matches found
The vulnerability of the PHP interpreter allows attackers to trigger a service failure, obtain confidential information, or execute arbitrary code.
The vulnerability of the SoapFault method toString in ext/soap/soap.c in the PHP interpreter is related to data type mixing errors. Exploiting this vulnerability may allow an attacker, operating remotely, to obtain confidential information, execute arbitrary code, or cause a service failure...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the pharconverttoother function ext/phar/pharobject.c in the PHP interpreter exists due to the lack of checking the file pointer before it is closed. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially have other effects using ...
The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.
The vulnerability of the exception::getTraceAsString function in the PHP interpreter is related to errors in data type mixing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the PHP interpreter allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the mcopy function in the Fileinfo component of the PHP interpreter exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failure termination of the application or execute arbitrary code using a...
The vulnerability of the PHP interpreter allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the PHPIncompleteClass function ext/standard/incompleteclass.c in the PHP interpreter is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code terminate the application using unexpected...
The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.
The vulnerability of the ftpgenlist function ext/ftp/ftp.c in the PHP interpreter is caused by a numerical overflow. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code with a long response to the LIST command...
The vulnerability of the PHP interpreter allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the functions ext/soap/phpencoding.c, ext/soap/phphttp.c, and ext/soap/soap.c in the PHP interpreter is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to cause a service failure application termination or execute arbitrary code usin...
UBUNTU-CVE-2016-4540
The graphemestripos function in ext/intl/grapheme/graphemestring.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a negative offset...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the Collator::sortWithSortKeys function ext/intl/collator/collatorsort.c in the PHP interpreter is related to the use of memory after it is freed. Exploiting this vulnerability may allow a remote attacker to cause a service failure termination of the application, or possibly...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the pharfixfilepath function ext/phar/phar.c in the PHP interpreter arises due to buffer overflow in the stack. Exploiting this vulnerability may allow an attacker to cause service failures or potentially have other effects by using a value with a very long length that is not...
The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.
The vulnerability of the SoapClient call function in the serializefunctioncall function ext/soap/soap.c in the PHP interpreter is related to improper handling of headers. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted packets, which cause ...
ProFTPd 1.3.5 - File Copy Vulnerability
Exploit for linux platform in category remote exploits Description TJ Saunders 2015-04-07 16:35:03 UTC Vadim Melihow reported a critical issue with proftpd installations that use the modcopy module's SITE CPFR/SITE CPTO commands; modcopy allows these commands to be used by unauthenticated clients...
php, php53 security update
CentOS Errata and Security Advisory CESA-2014:1012 Updated php53 and php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerabilit...
Moderate: Red Hat Security Advisory: php53 and php security update
Updated php53 and php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...
php: heap-based buffer over-read in DateInterval
A buffer over-read flaw was found in the way the DateInterval class parsed interval specifications. An attacker able to make a PHP application parse a specially crafted specification using DateInterval could possibly cause the PHP interpreter to crash...
RedHat Update for php RHSA-2014:1013-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Webfroot Shoutbox 2.32 Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7746/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of the 'conf' URI parameter. An attacker can exploit this...
DLA-0010-1 php5 - security update
Bulletin has no description...
DSA-2961-1 php5 - security update
Bulletin has no description...
PHP 5.4.x < 5.4.23 OpenSSL openssl_x509_parse() Memory Corruption
According to its banner, the version of PHP 5.4.x installed on the remote host is a version prior to 5.4.23. It is, therefore, potentially affected by a memory corruption flaw in the way the opensslx509parse function of the PHP OpenSSL extension parsed X.509 certificates. A remote attacker could...