PHP

CVEs (751)

• CVE-2016-4540CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.

• CVE-2016-4539CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in…

• CVE-2016-4538CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_, _one_, or _two_ global variable, which allows remote attackers to cause a…

• CVE-2016-4537CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.

• CVE-2016-4346CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.

• CVE-2016-4345CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.05

  Integer overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.

• CVE-2016-4344CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.05

  Integer overflow in the xml_utf8_encode function in ext/xml/xml.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long argument to the utf8_encode function, leading to a heap-based buffer overflow.

• CVE-2015-8880CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.03

  Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering an error.

• CVE-2015-8876CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.08

  Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method…

• CVE-2016-4073CriMay 20, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted…

• CVE-2016-4072CriMay 20, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.

• CVE-2015-8835CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application…

• CVE-2015-5589CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service (segmentation fault) or possibly…

• CVE-2015-4642CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the…

• CVE-2015-4601CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.08

  PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a…

• CVE-2015-4116CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.05

  Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.

• CVE-2016-1283CriJan 3, 2016
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.08

  The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote…

• CVE-2015-8394CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.05

  PCRE before 8.38 mishandles the (?() and (?(R) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object…

• CVE-2015-8391CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.06

  The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript…

• CVE-2015-8390CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.05

  PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp…