Filter
AND
-Infinity
0
PHPIn PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SA…
1
First published (updated )
Ubuntu PHP-FPMPHP-FPM logs from children may be altered
3.3
EPSS
0.04%
First published (updated )
PHP<a href="https://access.redhat.com/security/cve/CVE-2023-0567">CVE-2023-0567</a>[0]: PHP: Password_v…
1
First published (updated )
PHPAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x befo…
1
First published (updated )
PHP PCRE ExtensionIt was reported that pcre_exec in PHP pcre extension partially initialize a buffer when an invalid r…
1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
debian/php5The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrar…
3.6
First published (updated )
PHPacinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overw…
3.3
First published (updated )
PHPIt was reported[1] to the full-disclosure mailing list that PHP's configure script uses a predictabl…
1
First published (updated )
PHPpdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly…
2.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHPA security flaw was found in the way the com_print_typeinfo() routine of the PHP scripting language …
1
First published (updated )
PHPIt was reported that ZipArchive() would segfault when opening an empty archive with the FL_UNCHANGED…
1
First published (updated )
PHP PEARThe installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink att…
3.3
First published (updated )
PHP PEARThe installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlin…
3.3
First published (updated )
PHPKees Cook reported an information leak flaw in the PHP's XMLWriter, triggered by an invalid UTF-8 st…
1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHPThe upstream PHP 5.2.14 and 5.3.3 releases corrected an information disclosure flaw where the var_ex…
1
First published (updated )
PHPPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior …
2.1
First published (updated )
PHPThe imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which…
2.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHPThe mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x …
2.6
First published (updated )
PHPPHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server ht…
3.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHPBuffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows lo…
2.1
First published (updated )
PHPThe cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read file…
2.1
First published (updated )
PHPPHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executi…
2.1
First published (updated )
PHPThe copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read a…
2.1
First published (updated )
PHPDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open…
2.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.