927 matches found
CVE-2015-4603
The exception::getTraceAsString function in Zend/zendexceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a "type confusion" issue...
CVE-2015-4603
CVE-2015-4603 centers on PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8. The exception::getTraceAsString function in Zend/zend_exceptions.c allows remote code execution via a type confusion in an unexpected data type. Affected PHP versions and explicit fixes are noted in the descr...
CVE-2015-8873
Stack consumption vulnerability in Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service segmentation fault via recursive method calls...
PT-2016-3397 · Php +2 · Php +2
Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.4.44 PHP versions 5.5.x prior to 5.5.28 PHP versions 5.6.x prior to 5.6.12 Description: The issue is related to a stack consumption problem in the Zend/zend exceptions.c component of PHP, caused by insufficient input...
UBUNTU-CVE-2015-8873
Stack consumption vulnerability in Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service segmentation fault via recursive method calls...
PHP 5.6.x < 5.6.19 / 7.0.x < 7.0.4 Multiple Vulnerabilities
Binary data 9172.prm...
PHP 5.6.x < 5.6.19 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.19. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in file ext/wddx/wddx.c in the phpwddxpopelement function when handling XML data. An unauthenticated,...
PHP 7.0.x < 7.0.4 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.4. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists in file ext/soap/phphttp.c in the makehttpsoaprequest function when handling cookie data. An...
Zend Framework < 2.4.9 Encryption Weakness
Binary data 9137.prm...
Zend Framework < 2.3.6 CSRF/XSRF
Binary data 9139.prm...
Zend Framework < 2.2.9 / 2.3.x < 2.3.4 Session Validators Security Bypass
Binary data 9141.prm...
Zend Framework < 1.12.4 Multiple Vulnerabilities
Binary data 9150.prm...
Zend Framework < 1.12.9 / 2.2.x < 2.2.8 / 2.3.x < 2.3.3 SQL Injection
Binary data 9142.prm...
Zend Framework 1.12.x < 1.12.4 / 2.1.x < 2.1.6 / 2.2.x < 2.2.6 Multiple XEE DoS
Binary data 9144.prm...
Zend Framework < 2.2.10 / 2.3.x < 2.3.5 SQL Injection
Binary data 9140.prm...
Zend Framework < 2.0.8 / 2.1.x < 2.1.4 Multiple Vulnerabilities
Binary data 9146.prm...
Kaltura Remote PHP Code Execution
This module exploits an Object Injection vulnerability in Kaltura. By exploiting this vulnerability, unauthenticated users can execute arbitrary code under the context of the web server user. Kaltura has a module named keditorservices that takes user input and then uses it as an unserialized...
Zend Framework < 1.12.16 SQL Injection
Binary data 9148.prm...