Lucene search
K

710 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.3 views

The vulnerability of the utf8decode function in the PHP language interpreter allows attackers to execute XSS attacks.

The vulnerability of the utf8decode function in the PHP language interpreter exists due to insufficient validation of input data. Exploiting this vulnerability allows attackers to execute XSS attacks remotely...

7.3CVSS6.6AI score0.11281EPSS
Exploits1References34Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.3 views

The vulnerability of the NumberFormatter::setSymbol function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the NumberFormatter::setSymbol function in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

5.3CVSS5.4AI score0.12718EPSS
Exploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.1 views

The vulnerability of the openssl_x509_parse function in the OpenSSL library, a programming language interpreter for PHP, allows a hacker to execute arbitrary code in an MITM (Man-In-The-Middle) scenario.

The vulnerability of the opensslx509parse function in the OpenSSL library for the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in an MITM Man-In-The-Middle scenario...

4.3CVSS7.3AI score0.03588EPSS
Exploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.2 views

The vulnerability of the CGI interpreter component for the PHP programming language allows attackers to disclose protected information, compromise data integrity, or cause service failures.

The vulnerability of the cgi component sapi/cgi/cgimain.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information, compromise data integrity, or cause service failures...

7.5CVSS7.1AI score0.1689EPSS
Exploits1References19Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.3 views

The vulnerability of the `SdnToJulian` function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the SdnToJulian function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures...

5CVSS7.7AI score0.05699EPSS
Exploits2References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.2 views

The vulnerability of the sessions subsystem in the PHP programming language interpreter allows attackers to intercept user sessions.

The vulnerability of the PHP interpreter’s sessions subsystem is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to intercept a user’s session...

6.8CVSS7.4AI score0.036EPSS
Exploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.1 views

The vulnerability of the phar_parse_tarfile function in the PHP programming language allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the PHP interpreter extension is related to errors in number processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially created tar archive...

7.5CVSS8.2AI score0.42481EPSS
Exploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.2 views

The vulnerability of the zend_ts_hash_gracefuldestroy function (zend_ts_hash.c) in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the zendtshashgracefuldestroy function zendtshash.c in the PHP programming language is related to the repeated release of memory. Exploiting this vulnerability may allow a remote attacker to cause service interruptions or potentially have other adverse effects...

7.5CVSS6.9AI score0.03664EPSS
Exploits0References13Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.2 views

The vulnerability of the `object_custom` function in the PHP programming language allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the objectcustom function located in ext/standard/varunserializer.c in the PHP interpreter is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

7.5CVSS8AI score0.28862EPSS
Exploits1References27Affected Software5
CNVD
CNVD
added 2022/04/27 12:0 a.m.15 views

WordPress SP Project

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress SP Project...

8.8CVSS1.6AI score0.01674EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.1 views

The vulnerability of the crypt_des function in the FreeBSD operating system, which allows a hacker to increase their privileges

The vulnerability of the cryptdes function in the PostgreSQL database management system, the FreeBSD operating system, and the PHP programming language interpreter is related to errors in processing fully open text passwords when the password contains the character 0x80. Exploiting this...

4.3CVSS7.8AI score0.05734EPSS
Exploits0References26Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.4 views

The vulnerability of the Zend/zend_exceptions.c component of the PHP programming language interpreter allows a attacker to cause a service failure.

The vulnerability of the Zend/zendexceptions.c component of the PHP programming language interpreter exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause service failures through recursive calls to methods...

7.8CVSS7.4AI score0.03881EPSS
Exploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.3 views

The vulnerability of the phar_get_entry_data function in the PHP programming language allows a attacker to cause a service failure or potentially cause other effects.

The vulnerability of the phargetentrydata function in the PHP language interpreter is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause service failures or potentially cause other adverse effects...

6.8CVSS7.4AI score0.10288EPSS
Exploits0References15Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.2 views

The vulnerability of the phar_set inode function in the PHP language’s interpreter allows a hacker to execute arbitrary code.

The vulnerability of the pharset inode function in the PHP language interpreter arises due to buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS7.6AI score0.38434EPSS
Exploits1References22Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.1 views

The vulnerability in the ext/mysqlnd/mysqlnd.c component of the PHP interpreter allows attackers to perform spoofing attacks.

The vulnerability of the ext/mysqlnd/mysqlnd.c component of the PHP programming language interpreter is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

7.1CVSS7AI score0.01734EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.2 views

The vulnerability of the `multipart_buffer_headers` function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the multipartbufferheaders function main/rfc1867.c in the PHP programming language is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5CVSS7.5AI score0.50129EPSS
Exploits1References20Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.1 views

The vulnerability of the virtual_file_ex function in the PHP programming language allows a hacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the virtualfileex function in the PHP programming language is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause service failures or potentially have other adverse effects...

9.3CVSS7.6AI score0.03792EPSS
Exploits1References14Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.6 views

The vulnerability of the `php_raw_url_encode` function in the PHP programming language allows attackers to trigger a denial-of-service attack.

The vulnerability of the phprawurlencode function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures...

7.8CVSS7.4AI score0.05719EPSS
Exploits1References19Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.1 views

The vulnerability of the `stream_get_meta_data` function in the PHP programming language exists due to insufficient checks on input data, allowing attackers to compromise the integrity of the information.

The vulnerability of the streamgetmetadata function in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of information...

7.8CVSS7.2AI score0.02333EPSS
Exploits1References5Affected Software3
CNVD
CNVD
added 2022/04/21 12:0 a.m.13 views

WordPress VikBooking Hotel Booking Engine & PMS plugin信息泄露漏洞

WordPress and WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress VikBooking Hotel...

5.3CVSS1.7AI score0.01047EPSS
Exploits0References1
Rows per page
Query Builder