PHP

CVEs (751)

• CVE-2014-3487Jul 9, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.15

  The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF…

• CVE-2014-3479Jul 9, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.15

  The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted…

• CVE-2014-4721Jul 6, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.06

  The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which might allow context-dependent attackers to obtain sensitive…

• CVE-2014-3538Jul 3, 2014
  File Project

  File
  risk 0.00cvss —epss 0.12

  file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability…

• CVE-2014-4049Jun 18, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.11

  Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

• CVE-2014-3981Jun 8, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.

• CVE-2014-0238Jun 1, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.21

  The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.

• CVE-2014-0237Jun 1, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.20

  The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.

• CVE-2014-0185May 6, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.

• CVE-2013-7345Mar 24, 2014
  File Project

  File
  risk 0.00cvss —epss 0.03

  The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers…

• CVE-2014-2270Mar 14, 2014
  File Project

  File
  risk 0.00cvss —epss 0.04

  softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.

• CVE-2014-1943Feb 18, 2014
  Fine Free File Project

  Fine Free File
  risk 0.00cvss —epss 0.05

  Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.

• CVE-2014-2020Feb 18, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by using a (1) string or (2) array data type in place of a numeric data type, as demonstrated by an imagecrop function call with a string for the x…

• CVE-2013-7328Feb 18, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service (application crash) or obtain sensitive information via an imagecrop function call with a negative value for the (1) x or…

• CVE-2013-7327Feb 18, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL…

• CVE-2013-7226Feb 18, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.07

  Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading to a…

• CVE-2012-1171Feb 15, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper.

• CVE-2013-6712Nov 28, 2013
  PHP

  PHP
  risk 0.00cvss —epss 0.05

  The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.

• CVE-2013-1824Sep 16, 2013
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the…

• CVE-2013-4248Aug 18, 2013
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to…