VYPR

PHP

by PHP

Source repositories

CVEs (730)

  • CVE-2011-1657Aug 25, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.05

    The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service (application crash) via certain flags arguments, as demonstrated by (a) GLOB_ALTDIRFUNC and (b) GLOB_APPEND.

  • CVE-2011-0441Mar 29, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.00

    The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

  • CVE-2011-1469Mar 20, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.

  • CVE-2011-1466Mar 20, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.06

    Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.

  • CVE-2011-1464Mar 20, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.

  • CVE-2011-1148Mar 18, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.

  • CVE-2011-0755Feb 2, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.02

    Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, as demonstrated by a value that exceeds mt_getrandmax.

  • CVE-2011-0754Feb 2, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.00

    The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat…

  • CVE-2011-0753Feb 2, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.01

    Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service (memory corruption) via a large number of concurrent signals.

  • CVE-2011-0752Feb 2, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.01

    The extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal array and (2) the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures…

  • CVE-2010-4700Jan 18, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.01

    The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqli_fetch_assoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input…

  • CVE-2010-4699Jan 18, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.02

    The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings that are unrecognized by the iconv and mbstring (aka Multibyte String) implementations, which allows remote attackers to trigger an incomplete output array, and…

  • CVE-2010-4698Jan 18, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.

  • CVE-2010-4697Jan 18, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and…

  • CVE-2006-7243Jan 18, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.05

    PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists…

  • CVE-2010-4150Dec 7, 2010
    PHP
    PHP
    risk 0.00cvss —epss 0.06

    Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

  • CVE-2009-5016Nov 12, 2010
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different…

  • CVE-2010-3710Oct 25, 2010
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address…

  • CVE-2010-2950Sep 28, 2010
    PHP
    PHP
    risk 0.00cvss —epss 0.06

    Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the…

  • CVE-2010-2531Aug 20, 2010
    PHP
    PHP
    risk 0.00cvss —epss 0.05

    The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits…

Page 29 of 37