Filter
AND
-Infinity
0

Ubuntu PHP-FPMPHP-FPM logs from children may be altered

3.3
EPSS
0.04%
First published (updated )

PHPIn PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SA…

First published (updated )

PHP<a href="https://access.redhat.com/security/cve/CVE-2023-0567">CVE-2023-0567</a>[0]: PHP: Password_v…

First published (updated )

PHPPHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, whic…

2.1
First published (updated )

PHPrfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP sc…

2.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPThe apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 fin…

2.1
First published (updated )

PHPfopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to oth…

2.1
First published (updated )

PHPPHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile func…

2.1
First published (updated )

PHPPHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server ht…

3.6
First published (updated )

PHPBuffer Overflow

2.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPInteger Overflow

2.6
First published (updated )

PHPThe copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read a…

2.1
First published (updated )

PHPPHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executi…

2.1
First published (updated )

PHPDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open…

2.6
First published (updated )

PHPArgument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail an…

3.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPXSS

2.6
First published (updated )

PHPInput Validation, CRLF Injection

2.6
First published (updated )

PHPXSS

2.6
First published (updated )

PHPInfoleak

2.6
First published (updated )

PHPAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x befo…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPOn <a href="http://git.php.net/?p=php-src.git;a=blob;f=ext/soap/php_sdl.c;h=0ac4c2ed7a9bf87bb454db58…

First published (updated )

PHPacinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overw…

3.3
First published (updated )

PHPThe imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which…

2.1
First published (updated )

PHPThe mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x …

2.6
First published (updated )

PHPKees Cook reported an information leak flaw in the PHP's XMLWriter, triggered by an invalid UTF-8 st…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

debian/php5The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrar…

3.6
First published (updated )

PHPThe upstream PHP 5.2.14 and 5.3.3 releases corrected an information disclosure flaw where the var_ex…

First published (updated )

PHPA security flaw was found in the way the com_print_typeinfo() routine of the PHP scripting language …

First published (updated )

PHPIt was reported[1] to the full-disclosure mailing list that PHP's configure script uses a predictabl…

First published (updated )

PHPIt was reported that ZipArchive() would segfault when opening an empty archive with the FL_UNCHANGED…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203