Filters
Versions
4.57.0
10
4.9.0
9
4.0.0
8
4.81.0
8
3.14.5
6
4.33.0
6
4.94.0
5
4.95.0
5
4.96.0
5
4.97.0
5
4.98.0
5
4.8.5
4
3.10.0
3
3.13.0
3
3.28.0
3
4.19.0
3
4.20.0
3
4.20.1
3
4.23.1
3
4.24.0
3
4.25.0
3
4.26.0
3
4.27.0
3
4.28.0
3
4.28.1
3
4.32.0
3
4.38.0
3
4.39.0
3
4.40.0
3
4.41.0
3
4.42.0
3
4.43.0
3
4.44.0
3
4.45.0
3
4.58.0
3
4.58.1
3
4.59.0
3
4.60.0
3
4.61.0
3
4.62.0
3
3.12.3
2
3.14.1
2
3.21.10
2
3.24.6
2
3.27.4
2
3.30.9
2
4.0.3
2
4.15.2
2
4.16.0
2
4.16.3
2
4.17.0
2
4.17.2
2
4.18.0
2
4.18.1
2
4.79.0
2
4.8.3
2
4.80.0
2
4.82.0
2
4.83.0
2
3.12.4
1
3.14.2
1
3.21.7
1
3.21.9
1
3.24.3
1
3.24.5
1
3.25.1
1
3.25.2
1
3.26
1
3.27.5
1
3.27.7
1
3.30
1
3.30.0
1
3.30.1
1
3.30.4
1
3.30.5
1
4.0.1
1
4.0.2
1
4.0.4
1
4.1.0
1
4.102.1
1
4.103.0
1
4.113.0
1
4.114.0
1
4.115.0
1
4.116.0
1
4.117.0
1
4.118.0
1
4.118.1
1
4.154.0
1
4.169.0
1
4.170.0
1
4.171.0
1
4.172.0
1
4.18.2
1
4.19.1
1
4.2.0
1
4.20.2
1
4.21.0
1
4.22.0
1
4.23.0
1
4.3.0
1
4.4.0
1
4.5.0
1
4.6.0
1
4.7.0
1
4.78.0
1
4.8.0
1
4.80.1
1
4.93.1
1
Facebook HHVMHHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in …
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMThe fb_unserialize function did not impose a depth limit for nested deserialization. That meant a ma…
7.5
First published (updated )
Facebook HHVMIn the crypt function, we attempt to null terminate a buffer using the size of the input salt withou…
7.5
First published (updated )
Facebook HHVMIncorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second …
7.5
First published (updated )
Facebook HHVMxbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMIn-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking…
7.5
First published (updated )
Facebook HHVMInsufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds m…
8.1
First published (updated )
Facebook HHVMInsufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially …
7.5
First published (updated )
Facebook HHVMInsufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, poten…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMHHVM does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not …
5.3
First published (updated )
Facebook HHVMmcrypt_get_block_size did not enforce that the provided "module" parameter was a string, leading to …
9.8
First published (updated )
Facebook HHVMInsufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode an…
9.8
First published (updated )
Facebook HHVMInsufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bou…
9.8
First published (updated )
Facebook HHVMVarious APC functions accept keys containing null bytes as input, leading to premature truncation of…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMAn invalid free in mb_detect_order can cause the application to crash or potentially result in remot…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMHHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could…
7.5
First published (updated )
Facebook HHVMThe function number_format is vulnerable to a heap overflow issue when its second argument ($dec_poi…
9.8
First published (updated )
Facebook HHVMThe implementations of streams for bz2 and php://output improperly implemented their readImpl functi…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMThe Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting thi…
8.1
First published (updated )
Facebook HHVMA potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cau…
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMSelf recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact…
9.8
First published (updated )
Facebook HHVMInfinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impac…
9.8
First published (updated )
Facebook HHVMThe array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified …
9.8
First published (updated )
Facebook HHVMOut-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functio…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.