PT-2024-29636

Name of the Vulnerable Software and Affected Versions EC-CUBE versions 4 series Description A vulnerability exists where the software accepts extraneous untrusted data alongside trusted data. If exploited, an attacker with administrative privileges may be able to install arbitrary PHP packages...

CVE-2024-41924: Acceptance of Extraneous Untrusted Data With Trusted Data

Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerability is exploited, an attacker who obtained the administrative privilege may install an arbitrary PHP package. If the obsolete versions of PHP packages are installed, the product m...

JVN#48324254: EC-CUBE 4 Series improper input validation when installing plugins

EC-CUBE 4 series provided by EC-CUBE CO.,LTD improperly validates inputs when installing plugins CWE-349. Impact An attacker who obtained the administrative privilege may install an arbitrary PHP package. If the obsolete versions of PHP packages are installed, the product may be affected by some...

CVE-2024-5458 affecting package php for versions less than 8.3.8-1

CVE-2024-5458 affecting package php for versions less than 8.3.8-1. An upgraded version of the package is available that resolves this issue...

Mageia: Security Advisory (MGASA-2024-0262)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-5585 affecting package php for versions less than 8.3.8-1

CVE-2024-5585 affecting package php for versions less than 8.3.8-1. An upgraded version of the package is available that resolves this issue...

openSUSE Security Advisory (SUSE-SU-2024:2107-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-4577 affecting package php for versions less than 8.1.29-1

CVE-2024-4577 affecting package php for versions less than 8.1.29-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-2408 vulnerabilities

Vulnerabilities for packages: php...

CVE-2024-5458 vulnerabilities

Vulnerabilities for packages: php...

CVE-2024-5585 vulnerabilities

Vulnerabilities for packages: php...

Fedora 40 : php (2024-5e8ae0def0)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5e8ae0def0 advisory. PHP version 8.3.6 11 Apr 2024 Core: Fixed GH-13569 GC buffer unnecessarily grows up to GCMAXBUFSIZE when scanning WeakMaps. Arnaud Fixed bug GH-1361...

Fedora 38 : php (2024-39d50cc975)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-39d50cc975 advisory. PHP version 8.2.18 11 Apr 2024 Core: Fixed bug GH-13612 Corrupted memory in destructor with weak references. nielsdos Fixed bug GH-13784...

Mageia: Security Advisory (MGASA-2024-0132)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2024-103-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2024-1288)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for php (FEDORA-2023-984c26961f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-27962 CVE-2023-3823 affecting package php for versions less than 8.1.22-1

In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling...

AZL-63085 CVE-2023-3823 affecting package php for versions less than 8.2.8-1

In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling...

Mageia: Security Advisory (MGASA-2023-0234)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...