Lucene search
K

53 matches found

NVD
NVD
added 2025/12/18 8:16 a.m.4 views

CVE-2025-58949

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Spock spock allows PHP Local File Inclusion.This issue affects Spock: from n/a through = 1.17...

8.1CVSS0.00445EPSS
Exploits0References1
Fedora
Fedora
added 2025/07/13 2:58 a.m.5 views

[SECURITY] Fedora 41 Update: php-8.3.23-1.fc41

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

7.5CVSS7.1AI score0.00953EPSS
Exploits1
Fedora
Fedora
added 2025/03/21 1:22 a.m.13 views

[SECURITY] Fedora 40 Update: php-8.3.19-1.fc40

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS7.1AI score0.01138EPSS
Exploits3
Fedora
Fedora
added 2025/03/21 1:14 a.m.12 views

[SECURITY] Fedora 41 Update: php-8.3.19-1.fc41

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS7.1AI score0.01138EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2024/06/13 12:0 a.m.8 views

PHP Scripting Language Installed (Windows)

Binary data phpwininstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/13 12:0 a.m.5 views

PHP Scripting Language Installed (Unix)

Binary data phpnixinstalled.nbin...

7.3AI score
Exploits0References1
Debian
Debian
added 2024/05/07 11:30 p.m.39 views

[SECURITY] [DLA 3810-1] php7.3 security update

Debian LTS Advisory DLA-3810-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 07, 2024 https://wiki.debian.org/LTS Package : php7.3 Version : 7.3.31-1deb10u6 CVE ID : CVE-2024-2756 CVE-2024-3096 Security issues were found in PHP, a widely-used open source...

6.5CVSS6.7AI score0.49336EPSS
Exploits3
Debian
Debian
added 2024/04/15 7:26 p.m.44 views

[SECURITY] [DSA 5661-1] php8.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5661-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 15, 2024 https://www.debian.org/security/faq -...

9.8CVSS9.4AI score0.3786EPSS
Exploits5
F5 Networks
F5 Networks
added 2023/02/21 6:51 p.m.27 views

K15793: PHP Posthandler vulnerability CVE-2014-3622

Security Advisory Description A security vulnerability in the PHP scripting language may allow remote code execution by way of the Post Handler. CVE-2014-3622 - pending Impact None. F5 products do not use vulnerable versions of PHP. Security Advisory Status F5 Product Development has assigned ID...

9.8CVSS9.4AI score0.03121EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2023/02/15 6:12 a.m.2 views

SUSE CVE-2007-2748

The substrcount function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375...

4.3CVSS6.6AI score0.014EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:0 a.m.1 views

SUSE CVE-2016-5769

Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted length value,...

9.8CVSS10AI score0.08205EPSS
Exploits0References7
CNVD
CNVD
added 2022/09/30 12:0 a.m.158 views

PHP Denial of Service Vulnerability

PHP is a scripting language that executes on the server side. A denial of service vulnerability exists in PHP versions prior to 7.4.31, 8.0.0 and later, 8.0.24 and earlier, and 8.1.0 and later, and 8.1.11 and earlier, which stems from the fact that the phar decompressor code recursively...

5.5CVSS7.2AI score0.00565EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.4 views

The vulnerability of the fread function (ext/standard/file.c) in the PHP programming language allows a hacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the fread function ext/standard/file.c in the PHP programming language interpreter is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service failures or potentially other adverse effects...

9CVSS7.5AI score0.04397EPSS
Exploits1References9Affected Software3
OpenVAS
OpenVAS
added 2021/10/30 12:0 a.m.24 views

Fedora: Security Advisory for php (FEDORA-2021-9f68f5f752)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.2AI score0.01337EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2020/02/17 6:13 p.m.108 views

USN-4279-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS. CVE-2015-9253 It was discovered that PHP incorrectly handled certain inputs. An...

9.1CVSS7.6AI score0.08888EPSS
Exploits3
Veracode
Veracode
added 2019/05/02 6:2 a.m.51 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
Exploits78References10Affected Software4
Veracode
Veracode
added 2019/05/02 6:2 a.m.46 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
Exploits78References16Affected Software3
Tenable Nessus
Tenable Nessus
added 2017/07/24 12:0 a.m.55 views

Debian DLA-1034-1 : php5 security update

Several issues have been discovered in PHP recursive acronym for PHP: Hypertext Preprocessor, a widely-used open source general-purpose scripting language that is especially suited for web development and can be embedded into HTML. CVE-2016-10397 Incorrect handling of various URI components in th...

9.1CVSS7AI score0.06846EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2017/02/08 12:0 a.m.81 views

Debian DLA-818-1 : php5 security update

Several issues have been discovered in PHP recursive acronym for PHP: Hypertext Preprocessor, a widely-used open source general-purpose scripting language that is especially suited for web development and can be embedded into HTML. - CVE-2016-2554 Stack-based buffer overflow in ext/phar/tar.c...

10CVSS8.3AI score0.35438EPSS
Exploits3References12
Debian
Debian
added 2016/12/16 9:30 p.m.31 views

[SECURITY] [DSA 3737-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3737-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 16, 2016 https://www.debian.org/security/faq -...

9.8CVSS9.9AI score0.06974EPSS
Exploits0
Rows per page
Query Builder