PHP PHPMultiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to c…
PHP PHPUnspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the …
PHP PHPUnspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent atta…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPInput Validation, Integer Overflow, Buffer Overflow
PHP PHPThe SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPThe iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly …
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPThe zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allo…
PHP PHPThe tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows conte…
PHP PHPThe posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows co…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPMultiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 bef…
PHP PHPPHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path)…
PHP PHPThe mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at th…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPThe resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent atta…
PHP PHPThe mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal regis…
PHP PHPThe php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.…
PHP PHPThe ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-depend…
PHP PHPThe ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arb…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPBuffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified v…
PHP PHPscanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execu…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPPHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbi…
PHP PHPThe memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditi…
PHP PHPThe imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to c…
PHP PHPThe mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, w…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHP PHPmove_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could…
PHP PHPPHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers…
PHP PHPPHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions …
PHP PHPThe Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for …
PHP PHPThe file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files b…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.