Lucene search
+L

307 matches found

Debian
Debian
•added 2020/12/19 9:59 a.m.•128 views

[SECURITY] [DSA 4817-1] php-pear security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4817-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2020 https://www.debian.org/security/faq -...

7.8CVSS7.8AI score0.84554EPSS
SaveExploits5
osv_dsa
osv_dsa
•added 2020/12/19 12:00 a.m.•85 views

DSA-4817-1 php-pear - security update

Bulletin has no description...

7.8CVSS7.4AI score0.84554EPSS
SaveExploits5
osv_mgasa
osv_mgasa
•added 2020/12/08 10:40 a.m.•33 views

MGASA-2020-0453 Updated php-pear packages fix security vulnerabilities

Filename manipulation vulnerabilities CVE-2020-28948 / CVE-2020-28949 Updated also ArchiveTar to 1.4.11...

7.8CVSS7.4AI score0.84554EPSS
SaveExploits5References5
Mageia
Mageia
•added 2020/12/08 10:40 a.m.•78 views

Updated php-pear packages fix security vulnerabilities

Filename manipulation vulnerabilities CVE-2020-28948 / CVE-2020-28949 Updated also ArchiveTar to 1.4.11...

7.8CVSS7.5AI score0.84554EPSS
SaveExploits5References4
OpenVAS
OpenVAS
•added 2020/12/04 12:00 a.m.•62 views

Fedora: Security Advisory for php-pear (FEDORA-2020-5271a896ff)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2020/12/04 12:00 a.m.•50 views

Fedora: Security Advisory for php-pear (FEDORA-2020-f351eb14e3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8AI score
SaveExploits0References4
Fedora
Fedora
•added 2020/12/02 10:40 a.m.•86 views

[SECURITY] Fedora 32 Update: php-pear-1.10.12-4.fc32

PEAR is a framework and distribution system for reusable PHP components. This package contains the basic PEAR components...

7.8CVSS7.5AI score0.84554EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2020/12/02 12:00 a.m.•50 views

Fedora 33 : 1:php-pear (2020-f351eb14e3)

Fix Bug 27002: Filename manipulation vulnerabilities CVE-2020-28948 / CVE-2020-28949 mrook Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

7.8CVSS7.3AI score0.84554EPSS
SaveExploits5References3
Tenable Nessus
Tenable Nessus
•added 2020/12/02 12:00 a.m.•43 views

Fedora 32 : 1:php-pear (2020-5271a896ff)

Fix Bug 27002: Filename manipulation vulnerabilities CVE-2020-28948 / CVE-2020-28949 mrook Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

7.8CVSS7.3AI score0.84554EPSS
SaveExploits5References3
OpenVAS
OpenVAS
•added 2020/12/02 12:00 a.m.•57 views

Ubuntu: Security Advisory (USN-4654-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.84554EPSS
SaveExploits5References4
Tenable Nessus
Tenable Nessus
•added 2020/11/24 12:00 a.m.•43 views

Debian DLA-2465-1 : php-pear security update

It was discovered that there was a filename sanitisation issue in php-pear, a distribution system for reusable PHP components. For Debian 9 'Stretch', this problem has been fixed in version 1:1.10.1+submodules+notgz-9+deb9u2. We recommend that you upgrade your php-pear packages. For the detailed...

7.8CVSS7.2AI score0.84554EPSS
SaveExploits5References5
OpenVAS
OpenVAS
•added 2020/11/24 12:00 a.m.•68 views

Debian: Security Advisory (DLA-2465-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.84554EPSS
SaveExploits5References5
Debian
Debian
•added 2020/11/23 11:15 a.m.•67 views

[SECURITY] [DLA 2465-1] php-pear security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2465-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 23, 2020 https://wiki.debian.org/LTS -...

7.8CVSS7.2AI score0.84554EPSS
SaveExploits5
osv_dla
osv_dla
•added 2020/11/23 12:00 a.m.•69 views

DLA-2465-1 php-pear - security update

Bulletin has no description...

7.8CVSS7.4AI score0.84554EPSS
SaveExploits5
Rockylinux
Rockylinux
•added 2020/11/03 12:30 p.m.•22 views

new module: php:7.4

An update is available for php-pear, php-pecl-rrd, php, php-pecl-apcu, php-pecl-xdebug, libzip, php-pecl-zip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Thi...

1.5AI score
SaveExploits0
Rockylinux
Rockylinux
•added 2020/04/28 9:05 a.m.•34 views

7.3 enhancement update

An update is available for php-pear, php-pecl-rrd, php-pecl-apcu, php-pecl-xdebug, libzip, php-pecl-zip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For...

1.8AI score
SaveExploits0
Veracode
Veracode
•added 2020/04/10 1:05 a.m.•30 views

Symlink Attack

php-pear is vulnerable to symlink attack. It was found that the "pear" command created temporary files in an insecure way when installing packages. A malicious, local user could use this flaw to conduct a symbolic link attack, allowing them to overwrite the contents of arbitrary files accessible ...

3.3CVSS3.2AI score0.00477EPSS
SaveExploits1References21Affected Software1
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for php-pear (EulerOS-SA-2019-1147)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.19125EPSS
SaveExploits5References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•37 views

Huawei EulerOS: Security Advisory for php-pear (EulerOS-SA-2019-1121)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.19125EPSS
SaveExploits5References2
NVD
NVD
•added 2019/12/05 7:15 p.m.•39 views

CVE-2012-1105

An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner...

5.5CVSS5.3AI score0.00464EPSS
SaveExploits0References5
Rows per page
Query Builder