533 matches found
CVE-2017-5520: Unrestricted Upload of File with Dangerous Type
The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the .php6, .php7 and .phtml extensions...
openSUSE Security Update : php7 (openSUSE-2017-61)
This update for php7 fixes the following issues : - CVE-2016-9933 Possible stack overflow on truecolor images handling bsc1015187 - CVE-2016-9934 Dereference from NULL pointer could lead to crash bsc1015188 - CVE-2016-9935 Invalid read could lead to crash bsc1015189 - CVE-2016-9936 Use After free...
openSUSE Security Update : php7 (openSUSE-2016-1440) (httpoxy)
This update for php7 fixes the following security issues : - CVE-2016-5385: Setting HTTPPROXY environment variable via Proxy header httpoxy bsc988486. - CVE-2016-9137: Fixing a Use After Free in unserialize bsc1008029. This update was imported from the SUSE:SLE-12:Update update project...
SUSE-SU-2016:2941-1 Security update for php7
This update for php7 fixes the following security issues: - CVE-2016-5385: Setting HTTPPROXY environment variable via Proxy header httpoxy bsc988486. - CVE-2016-9137: Fixing a Use After Free in unserialize bsc1008029...
Internet Bug Bounty: Use After Free in PHP7 unserialize()
The bug reported at: https://bugs.php.net/bug.php?id=72978...
SUSE-SU-2016:2683-1 Security update for php7
This update for php7 fixes the following security issue: - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...
SUSE-SU-2016:2683-2 Security update for php7
This update for php7 fixes the following security issue: - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...
SUSE-SU-2016:2460-1 Security update for php7
This update for php7 fixes the following security issues: CVE-2016-6128: Invalid color index not properly handled bsc987580 CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 CVE-2016-6292: Null pointer dereference in exifprocessusercomment...
SUSE-SU-2016:2460-2 Security update for php7
This update for php7 fixes the following security issues: CVE-2016-6128: Invalid color index not properly handled bsc987580 CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 CVE-2016-6292: Null pointer dereference in exifprocessusercomment...
PHP7 Unserialization Use After Free
A Use-After-Free vulnerability exists in the Standard PHP library's unserializion of array objects, due to an internal array self-reference. An attacker could exploit this vulnerability by supplying crafted input to a PHP application. Successful exploitation may result in remote execution of...
FreeBSD : php7 -- multiple vulnerabilities (5af511e5-e928-11e5-92ce-002590263bf5)
The PHP Group reports : - Core : - Fixed bug 71637 Multiple Heap Overflow due to integer overflows in xml/filterurl/addcslashes. - SOAP : - Fixed bug 71610 Type Confusion Vulnerability - SOAP / makehttpsoaprequest. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
CakePHP 2.6.13, 2.7.11, 2.8.2, 3.0.17, 3.1.12, and 3.2.5 Released
CakePHP 2.6.13, 2.7.11, 2.8.2, 3.0.17, 3.1.12, and 3.2.5 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 2.6.13, 2.7.11, 2.8.2, 3.0.17, 3.1.12, and 3.2.5. These releases contain security fixes. 3.2.5 and 2.8.2 also contain bugfixes. Security Fixes These...
