3946 matches found
ROS-20250822-24
A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...
ROS-20250822-23
A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...
ROS-20250822-21
A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...
USN-7648-2 php7.0, php7.2, php7.4 vulnerabilities
USN-7648-1 fixed several vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain hostnames containing null characters. A remote attacker...
Linux Distros Unpatched Vulnerability : CVE-2019-19791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LemonLDAP::NG aka lemonldap-ng before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/REST endpoints when some...
Linux Distros Unpatched Vulnerability : CVE-2023-3247
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, 8.2. before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for...
Linux Distros Unpatched Vulnerability : CVE-2025-6491
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML...
Malicious code in soap-sirius-delphinus-brane (npm)
The package soap-sirius-delphinus-brane was found to contain malicious code...
Malicious code in loopback-connector-soap-elemetal (npm)
The package loopback-connector-soap-elemetal was found to contain malicious code...
Malicious code in achernar-soap-acamar-geomorphology (npm)
The package achernar-soap-acamar-geomorphology was found to contain malicious code...
Malicious code in soap-repository (npm)
The package soap-repository was found to contain malicious code...
Malicious code in soap-local-celeste-magellan (npm)
The package soap-local-celeste-magellan was found to contain malicious code...
Malicious code in soap-jsonp-registry-local (npm)
The package soap-jsonp-registry-local was found to contain malicious code...
Malicious code in css-loader-quito-soap-ursa (npm)
The package css-loader-quito-soap-ursa was found to contain malicious code...
Malicious code in impulse-resonance-soap-cryonics (npm)
The package impulse-resonance-soap-cryonics was found to contain malicious code...
Malicious code in eslint-plugin-restart-vega-soap (npm)
The package eslint-plugin-restart-vega-soap was found to contain malicious code...
Malicious code in local-phoebe-soap-react-bootstrap (npm)
The package local-phoebe-soap-react-bootstrap was found to contain malicious code...
Malicious code in nconf-sirius-dorado-soap (npm)
The package nconf-sirius-dorado-soap was found to contain malicious code...