660 matches found
CVE-2024-8932
In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...
CVE-2024-51754
Twig is a template language for PHP. In a sandbox, an attacker can call toString on an object even if the toString method is not allowed by the security policy when the object is part of an array or an argument list arguments to a function or a filter for instance. This issue has been patched in...
[SECURITY] [DLA 3920-1] php7.4 security update
Debian LTS Advisory DLA-3920-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 14, 2024 https://wiki.debian.org/LTS Package : php7.4 Version : 7.4.33-1+deb11u6 CVE ID : CVE-2022-4900 CVE-2024-5458 CVE-2024-8925 CVE-2024-8927 CVE-2024-9026 Debian Bug : 10728...
OESA-2024-2248 php security update
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
CVE-2024-8927 cgi.force_redirect configuration is bypassable due to the environment variable collision
In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, HTTPREDIRECTSTATUS variable is used to check whether or not CGI binary is being run by the HTTP server. However, in certain scenarios, the content of this variable can be controlled by the request submitter via HTTP...
K000141355: Multiple PHP vulnerabilities
Security Advisory Description CVE-2016-4342 ext/phar/pharobject.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact v...
RHSA-2017:3221 Red Hat Security Advisory: php security update
Bulletin has no description...
RHSA-2016:2598 Red Hat Security Advisory: php security and bug fix update
Bulletin has no description...
RHSA-2015:0021 Red Hat Security Advisory: php security update
Bulletin has no description...
RHSA-2014:1327 Red Hat Security Advisory: php security update
Bulletin has no description...
RHSA-2013:1813 Red Hat Security Advisory: php53 and php security update
Bulletin has no description...
RHSA-2013:1825 Red Hat Security Advisory: php53 security update
Bulletin has no description...
RHSA-2013:1824 Red Hat Security Advisory: php security update
Bulletin has no description...
RHSA-2012:0570 Red Hat Security Advisory: php security update
Bulletin has no description...
RHSA-2007:0163 Red Hat Security Advisory: php security update for Stronghold
Bulletin has no description...
RHSA-2006:0730 Red Hat Security Advisory: php security update
Bulletin has no description...
RHSA-2006:0568 Red Hat Security Advisory: php security update
Bulletin has no description...
RHSA-2004:392 Red Hat Security Advisory: php security update
Bulletin has no description...
[SECURITY] [DLA 3833-1] php7.3 security update
Debian LTS Advisory DLA-3833-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 17, 2024 https://wiki.debian.org/LTS Package : php7.3 Version : 7.3.31-1deb10u7 CVE ID : CVE-2024-5458 Debian Bug : 1072885 PHP, a widely-used open source general purpose scripting...