780 matches found
PHP 5.2.x<5.2.13, 5.3.x<5.3.3 Zend引擎信息泄露漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 preg_match,unpack,pack,zend引擎等多个信息泄漏漏洞
No description provided by source...
PHP 5.1.14 多个缓冲区溢出漏洞
No description provided by source...
PHP <5.2.7 error_log绕过安全模式限制漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 iconv_mime_decode等函数信息泄露漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 html_entity_decode函数信息泄露漏洞
No description provided by source...
php 5.2.x<5.2.14,5.3.x<5.3.3 fnmatch 函数拒绝服务漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 html_entity_decode函数信息泄露漏洞
No description provided by source...
PHP <5.3.4 PCNTL扩展拒绝服务漏洞
No description provided by source...
PHP 5.x<5.3.6 Zip扩展stream_get_contents拒绝服务漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 SplObjectStorage unserializerd代码执行漏洞
No description provided by source...
PHP <5.3.6 _zip_name_locate 拒绝服务漏洞
No description provided by source...
PHP 5.2.x<5.2.15,5.3.x<5.3.4 GD扩展'imagepstext()'函数缓冲区溢出漏洞
No description provided by source...
PHP 5.2.x<5.2.15,5.3.x<5.3.4 Zend引擎释放后使用拒绝服务漏洞
No description provided by source...
CVE-2011-0421
The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service NULL pointer dereference via an empty ZIP archive that is processed with a...
PHP <= 5.3.6 shmop_read() Integer Overflow DoS
Exploit for linux platform in category dos / poc 0day.today 2018-02-02...
Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference
On Wed, 16 Feb 2011 16:11:23 -0700 cxib wrote: Affected Software: - PHP 5.3.5 grapheme is neither part of PHP core, nor built-in PHP extension, therefore above is false as bug is not in PHP itself. People using PHP 5.3.5 but not using grapheme some distros like Debian and derrivatives offer this...
CVE-2010-4700
The setmagicquotesruntime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqlifetchassoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly...
