Lucene search
+L

10 matches found

BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•19 views

PHP process_nested_data Code Execution

The vulnerability of the processnesteddata function in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.5CVSS7.2AI score0.44446EPSS
SaveExploits5References24Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•21 views

PHP process_nested_data Code Execution

The vulnerability of the processnesteddata function in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.5CVSS7.2AI score0.55065EPSS
SaveExploits8References18Affected Software4
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•24 views

PHP Interpreter RCE

The vulnerability of the PHP interpreter in the processnesteddata function ext/standard/varunserializer.re lies in the use of memory after it is freed. As a result of exploiting this vulnerability, a malicious actor who operates remotely can execute arbitrary code through a specially crafted...

7.5CVSS7.2AI score0.11755EPSS
SaveExploits5References3Affected Software1
RedHat Linux
RedHat Linux
•added 2015/07/09 5:01 p.m.•21 views

php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re

A flaws was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrary code...

7.5CVSS6.9AI score0.11755EPSS
SaveExploits5References4
RedHat Linux
RedHat Linux
•added 2015/06/23 8:11 a.m.•16 views

php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re

A flaws was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrary code...

7.5CVSS6.9AI score0.11755EPSS
SaveExploits5References4
CNVD
CNVD
•added 2015/03/31 12:00 a.m.•21 views

PHP process_nested_data function memory misreference vulnerability

PHP is a popular programming language. A memory misreference vulnerability in the processnesteddata function in PHP ext/standard/varunserializer.re allows remote attackers to execute arbitrary code using special unserialized calls...

7.5CVSS8AI score0.11755EPSS
SaveExploits5References1
Positive Technologies
Positive Technologies
•added 2015/03/20 12:00 a.m.•9 views

PT-2015-1020

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.39 PHP versions 5.5.x prior to 5.5.23 PHP versions 5.6.x prior to 5.6.7 Description The issue is related to a use-after-free vulnerability in the process nested data function. This vulnerability allows remote attacker...

7.5CVSS0.11755EPSS
SaveExploits5References354
Positive Technologies
Positive Technologies
•added 2014/12/30 12:00 a.m.•7 views

PT-2014-2047

Name of the Vulnerable Software and Affected Versions PHP versions 5.4.x through 5.4.36 PHP versions 5.5.x through 5.5.20 PHP versions 5.6.x through 5.6.4 Description The issue is related to a use-after-free vulnerability in the process nested data function in ext/standard/var unserializer.re in...

7.5CVSS0.44446EPSS
SaveExploits10References315
Positive Technologies
Positive Technologies
•added 2014/12/20 12:00 a.m.•8 views

PT-2014-2038

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.36 PHP versions 5.5.x prior to 5.5.20 PHP versions 5.6.x prior to 5.6.4 Description The issue is related to a use-after-free vulnerability in the process nested data function. This vulnerability can be exploited by a...

7.5CVSS0.55065EPSS
SaveExploits8References365
osv_ubuntu
osv_ubuntu
•added 2014/12/20 12:00 a.m.•28 views

UBUNTU-CVE-2014-8142

Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys...

7.5CVSS7.1AI score0.55065EPSS
SaveExploits8References3
Rows per page
Query Builder