Filters
PHP PHPThe zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allo…
6.4
First published (updated )
PHP PHPThe proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does …
7.5
First published (updated )
PHP PHPUnspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attac…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPUnspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown imp…
7.5
First published (updated )
PHP PHPThe (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random n…
5.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPThe mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x …
2.6
First published (updated )
PHP PHPPHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPMultiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 bef…
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPPHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path)…
4.6
First published (updated )
PHP PHPThe mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at th…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPThe session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count …
7.5
First published (updated )
PHP PHPThe resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent atta…
6.8
First published (updated )
PHP PHPThe mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal regis…
6.8
First published (updated )
PHP PHPThe shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that thei…
7.5
First published (updated )
PHP PHPThe php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPThe ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-depend…
5.1
First published (updated )
PHP PHPThe ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arb…
5.1
First published (updated )
PHP PHPUnspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global var…
10
First published (updated )
PHP PHPBuffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified v…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPBuffer Overflow, SQL Injection, Integer Overflow
7.5
First published (updated )
PHP PHPMultiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrar…
7.5
First published (updated )
PHP PHPPHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPPHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server ht…
3.6
First published (updated )
PHP PHPPHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PH…
7.5
First published (updated )
PHP PHPscanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execu…
4.6
First published (updated )
PHP PHPzend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_ha…
9.3
First published (updated )
PHP PHPThe copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read a…
2.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open…
2.6
First published (updated )
PHP PHPPHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary da…
First published (updated )
PHP PHPThe c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the …
9.3
First published (updated )
PHP PHPArgument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendm…
6.4
First published (updated )
PHP PHPUnspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows r…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.