Lucene search
K

52 matches found

NVD
NVD
added 2025/12/18 8:16 a.m.2 views

CVE-2025-58949

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Spock spock allows PHP Local File Inclusion.This issue affects Spock: from n/a through = 1.17...

8.1CVSS0.0011EPSS
Exploits0References1
Fedora
Fedora
added 2025/07/13 2:58 a.m.5 views

[SECURITY] Fedora 41 Update: php-8.3.23-1.fc41

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

7.5CVSS7.1AI score0.00772EPSS
Exploits1
Fedora
Fedora
added 2025/03/21 1:22 a.m.11 views

[SECURITY] Fedora 40 Update: php-8.3.19-1.fc40

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS7.1AI score0.0103EPSS
Exploits3
Fedora
Fedora
added 2025/03/21 1:14 a.m.9 views

[SECURITY] Fedora 41 Update: php-8.3.19-1.fc41

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS7.1AI score0.0103EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2024/06/13 12:0 a.m.8 views

PHP Scripting Language Installed (Windows)

Binary data phpwininstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/13 12:0 a.m.4 views

PHP Scripting Language Installed (Unix)

Binary data phpnixinstalled.nbin...

7.3AI score
Exploits0References1
Debian
Debian
added 2024/05/07 11:30 p.m.38 views

[SECURITY] [DLA 3810-1] php7.3 security update

Debian LTS Advisory DLA-3810-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 07, 2024 https://wiki.debian.org/LTS Package : php7.3 Version : 7.3.31-1deb10u6 CVE ID : CVE-2024-2756 CVE-2024-3096 Security issues were found in PHP, a widely-used open source...

6.5CVSS6.7AI score0.15416EPSS
Exploits3
Debian
Debian
added 2024/04/15 7:26 p.m.44 views

[SECURITY] [DSA 5661-1] php8.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5661-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 15, 2024 https://www.debian.org/security/faq -...

9.8CVSS9.4AI score0.29385EPSS
Exploits5
F5 Networks
F5 Networks
added 2023/02/21 6:51 p.m.25 views

K15793: PHP Posthandler vulnerability CVE-2014-3622

Security Advisory Description A security vulnerability in the PHP scripting language may allow remote code execution by way of the Post Handler. CVE-2014-3622 - pending Impact None. F5 products do not use vulnerable versions of PHP. Security Advisory Status F5 Product Development has assigned ID...

9.8CVSS9.4AI score0.01951EPSS
Exploits1Affected Software14
SUSE CVE
SUSE CVE
added 2023/02/15 6:12 a.m.1 views

SUSE CVE-2007-2748

The substrcount function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375...

4.3CVSS6.6AI score0.00557EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:0 a.m.0 views

SUSE CVE-2016-5769

Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted length value,...

9.8CVSS10AI score0.0615EPSS
Exploits0References7
CNVD
CNVD
added 2022/09/30 12:0 a.m.158 views

PHP Denial of Service Vulnerability

PHP is a scripting language that executes on the server side. A denial of service vulnerability exists in PHP versions prior to 7.4.31, 8.0.0 and later, 8.0.24 and earlier, and 8.1.0 and later, and 8.1.11 and earlier, which stems from the fact that the phar decompressor code recursively...

5.5CVSS7.2AI score0.00014EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/10/30 12:0 a.m.23 views

Fedora: Security Advisory for php (FEDORA-2021-9f68f5f752)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.2AI score0.0014EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2020/02/17 6:13 p.m.105 views

USN-4279-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS. CVE-2015-9253 It was discovered that PHP incorrectly handled certain inputs. An...

9.1CVSS7.6AI score0.06404EPSS
Exploits3
Veracode
Veracode
added 2019/05/02 6:2 a.m.44 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.74663EPSS
Exploits78References16Affected Software3
Veracode
Veracode
added 2019/05/02 6:2 a.m.48 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.74663EPSS
Exploits78References10Affected Software4
Tenable Nessus
Tenable Nessus
added 2017/07/24 12:0 a.m.54 views

Debian DLA-1034-1 : php5 security update

Several issues have been discovered in PHP recursive acronym for PHP: Hypertext Preprocessor, a widely-used open source general-purpose scripting language that is especially suited for web development and can be embedded into HTML. CVE-2016-10397 Incorrect handling of various URI components in th...

9.1CVSS7AI score0.40698EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2017/02/08 12:0 a.m.79 views

Debian DLA-818-1 : php5 security update

Several issues have been discovered in PHP recursive acronym for PHP: Hypertext Preprocessor, a widely-used open source general-purpose scripting language that is especially suited for web development and can be embedded into HTML. - CVE-2016-2554 Stack-based buffer overflow in ext/phar/tar.c...

10CVSS8.3AI score0.72278EPSS
Exploits3References12
Debian
Debian
added 2016/12/16 9:30 p.m.31 views

[SECURITY] [DSA 3737-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3737-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 16, 2016 https://www.debian.org/security/faq -...

9.8CVSS9.9AI score0.05314EPSS
Exploits0
CNVD
CNVD
added 2016/05/04 12:0 a.m.1 views

PHP 'ext/filter/sanitizing_filters.c' integer overflow vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. An integer overflow vulnerability exists in PHP's ext/filter/sanitizingfilters.c file. An attacker could exploit this vulnerability to cause a...

9.8CVSS9.1AI score0.00669EPSS
Exploits1References1
Rows per page
Query Builder