PHP Denial of Service Vulnerability (CNVD-2017-01943)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

UBUNTU-CVE-2016-3124

The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors...

PHP 'gdImageCreateFromGd2Ctx()' Function Denial of Service Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

PHP has multiple vulnerabilities

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. PHP versions 5.6.x, 7.0.x suffer from a remote denial of service, remote access to sensitive information, and remote command execution vulnerabilities. An attacker can...

UBUNTU-CVE-2016-9934

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string...

PHP Standard PHP Library Memory Misreference Vulnerability (CNVD-2017-00067)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and program extensions in C, C++, etc. The Standard PHP Libra...

u5cmszip_en Cms Cross Site Scripting Vulnerability

u5CMS is a content management system CMS based on PHP, MySQL and Apache for medium-sized websites, conferences, audit processes, PayPal payments and online surveys. The system supports WYSIWYG editor, creating survey forms and data storage. A cross-site scripting vulnerability exists in the...

PHP 'ext/wddx/wddx.c' Null Pointer Reference Remote Denial of Service Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A nu...

Zikula Directory Traversal Vulnerability

Zikula is the Zikula Foundation's set of PHP application frameworks for building and maintaining Web sites, which can be extended with third-party add-on modules into communities, portals, e-commerce, and more. A directory traversal vulnerability exists in the jcss.php file in Zikula versions 1.3...

PHP 'unserialize()' function memory misreference vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A memory misreference vulnerability exists in the PHP 'unserialize' function. An attacker could exploit this vulnerability to execute arbitrary...

php: Null pointer dereference in exif_process_user_comment

The exifprocessusercomment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted JPEG image...

php: Out-of-bounds memory read via gdImageRotateInterpolated

A buffer over-read flaw was found in the GD library used by the PHP gd extension. A specially crafted image file could cause a PHP application using the imagerotate function to disclose portions of the server memory or crash the PHP application...

php: Double free in _php_mb_regex_ereg_replace_exec

A double free flaw was found in the mberegreplacecallback function of php which is used to perform regex search. This flaw could possibly cause a PHP application to crash...

[SECURITY] Fedora 25 Update: php-7.0.12-2.fc25

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

PHP Denial of Service Vulnerability (CNVD-2016-07713)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

ALPINE-CVE-2016-7416

ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...

PHP virtual_popen function heap overflow vulnerability

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A heap overflow vulnerability exists in the PHP virtualpopen function, which allows remote attackers to exploit the vulnerability to execute arbitrary code...

PHP heap buffer overflow vulnerability (CNVD-2016-07335)

PHP is a new language for writing CGI programs. PHP suffers from a heap buffer overflow vulnerability. A remote attacker can exploit this vulnerability to overwrite a 4-byte heap buffer, causing a denial of service or execution of arbitrary code...

PHP JsonSerializable::jsonSerialize json_encode Local Denial of Service Vulnerability

PHP is an open source general-purpose computer scripting language. PHP 7.0 A local denial of service vulnerability exists in JsonSerializable::jsonSerialize jsonencode. Allows an attacker to exploit the vulnerability to launch a denial of service attack...

PHP 5.0.0 'snmpwalkoid()' Local Denial of Service Vulnerability

PHP is a new language for writing CGI programs. A local denial of service vulnerability exists in PHP 5.0.0 'snmpwalkoid', which can be exploited by attackers to launch denial of service attacks...