SUSE: Security Advisory (SUSE-SU-2025:0994-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:1012-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers bsc1239664 - CVE-2024-11235: Fixed reference counting in phprequestshutdown causing Use-After-Free bsc1239666 - CVE-2025-1219: Fixed libxml streams using wrong...

SUSE-SU-2025:0994-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2024-11235: Fixed reference counting in phprequestshutdown causing Use-After-Free bsc1239666 - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers bsc1239664 - CVE-2025-1219: Fixed libxml streams using wrong...

php8-8.3.19-1.1 on GA media (moderate)

php8-8.3.19-1.1 on GA media Announcement ID: openSUSE-SU-2025:14895-1 Rating: moderate Cross-References: CVE-2024-11235 CVE-2025-1217 CVE-2025-1219 CVE-2025-1734 CVE-2025-1736 CVE-2025-1861 Affected Products: openSUSE Tumbleweed An update that solves 6 vulnerabilities can now be installed...

SUSE SLES15 / openSUSE 15 Security Update : php8 (SUSE-SU-2024:4136-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4136-1 advisory. - CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter bsc1233702. - CVE-2024-11234:...

SUSE SLES15 / openSUSE 15 Security Update : php8 (SUSE-SU-2024:4215-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4215-1 advisory. - CVE-2024-11233: buffer overread when processing input with the convert.quoted-printable-decode filter. bsc1233702 -...

openSUSE Security Advisory (SUSE-SU-2024:4215-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:4215-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2024-11233: buffer overread when processing input with the convert.quoted-printable-decode filter. bsc1233702 - CVE-2024-11234: possible CRLF injection in URIs when a proxy is configured in a stream context. bsc1233703 - CVE-2024-8929: data...

openSUSE Security Advisory (SUSE-SU-2024:4136-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:4136-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter bsc1233702. - CVE-2024-11234: Configuring a proxy in a stream context might allow for CRLF injection in URIs bsc1233703. - CVE-2024-8929: Leak partial content of the...

php8-8.3.14-1.1 on GA media (moderate)

php8-8.3.14-1.1 on GA media Announcement ID: openSUSE-SU-2024:14521-1 Rating: moderate Cross-References: CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 CVE-2024-8929 CVE-2024-8932 CVSS scores: CVE-2024-11233 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2024-11233 SUSE : 8.3...

OPENSUSE-SU-2024:14521-1 php8-8.3.14-1.1 on GA media

These are all security issues fixed in the php8-8.3.14-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-52044

Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution RCE as there is no restriction for uploading files with the .php8 extension...

CVE-2023-52044

Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution RCE as there is no restriction for uploading files with the .php8 extension...

CVE-2023-52044

Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution RCE as there is no restriction for uploading files with the .php8 extension...

CVE-2023-52044

Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution RCE as there is no restriction for uploading files with the .php8 extension...

CVE-2023-52044: Unrestricted Upload of File with Dangerous Type

Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution RCE as there is no restriction for uploading files with the .php8 extension...

PT-2024-14373 · Studio 42 · Elfinder

Name of the Vulnerable Software and Affected Versions: Studio-42 eLfinder versions 2.1.62 and prior Description: The issue is related to Remote Code Execution RCE due to the lack of restriction for uploading files with the .php8 extension. This allows users to upload malicious files, potentially...

CVE-2023-52044

The studio-42/elfinder open-source web file manager is vulnerable to Remote Code Execution (RCE) in version 2.1.62. The root cause is a lack of restrictions on uploaded file types, specifically allowing the upload of files with the .php8 extension. An attacker can exploit this by uploading a mali...

openSUSE Security Advisory (SUSE-SU-2024:3729-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...