Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 816

Export CSV
CVE-2015-8877

gd: gdImageScaleTwoPass function in gd_interpolation.c uses inconsistent allocate and free approaches

The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.

CVSS 3.0 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Libgd Php Redhat
Products
Libgd Php Rhel Software Collections
CVE-2015-8878

php: main/php_open_temporary_file.c does not ensure thread safety

main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses.

CVSS 3.0 · 5.9 Medium EPSS 1.2% KEV · Not listed
Vendors
Php
Products
Php
CVE-2015-8879

php: odbc_bindcols function mishandles driver behavior for SQL_WVARCHAR columns

The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Php Redhat
Products
Php Rhel Software Collections
CVE-2015-8880

php: Double free vulnerability in error condition of format printer

Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering an error.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Php
Products
Php
CVE-2015-8935

php: HTTP response splitting in header() function

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CVSS 3.0 · 6.1 Medium EPSS 3.2% KEV · Not listed
Vendors
Php Redhat
Products
Php Rhel Software Collections
CVE-2014-3669

php: integer overflow in unserialize()

Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value.

CVSS 2.0 · 7.5 High EPSS 28.9% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Eus and 1 more
CVE-2014-3515

php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

CVSS 2.0 · 7.5 High EPSS 30.1% KEV · Not listed
Vendors
Debian Php Redhat
Products
Debian Linux Php Enterprise Linux and 1 more
CVE-2014-3670

php: heap corruption issue in exif_thumbnail()

The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function.

CVSS 2.0 · 6.8 Medium EPSS 22.6% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Eus and 1 more
CVE-2014-3710

file: out-of-bounds read in elf note headers

The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.

CVSS 2.0 · 5.0 Medium EPSS 14.0% KEV · Not listed
Vendors
Canonical Debian Php and 1 more
Products
Ubuntu Linux Debian Linux Php and 2 more
CVE-2014-3981

php: insecure temporary file use in the configure script

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Php
Products
Php
CVE-2014-4049

php: heap-based buffer overflow in DNS TXT record parsing

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

CVSS 2.0 · 5.1 Medium EPSS 10.9% KEV · Not listed
Vendors
Debian Opensuse Php and 1 more
Products
Debian Linux Opensuse Php and 2 more
CVE-2014-4670

php: SPL Iterators use-after-free

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Software Collections
CVE-2014-4698

php: ArrayIterator use-after-free due to object change during sorting

Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted ArrayIterator usage within applications in certain web-hosting environments.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Software Collections
CVE-2014-3487

file: cdf_read_property_info insufficient boundary check

The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

CVSS 2.0 · 4.3 Medium EPSS 14.9% KEV · Not listed
Vendors
Debian File Project Opensuse and 3 more
Products
Debian Linux File Opensuse and 4 more
CVE-2016-1283

pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)

The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

CVSS 3.1 · 9.8 Critical EPSS 7.8% KEV · Not listed
Vendors
Fedoraproject Oracle Pcre and 2 more
Products
Fedora Solaris Pcre and 2 more
CVE-2016-1903

php: Out-of-bounds memory read via gdImageRotateInterpolated

The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.

CVSS 3.0 · 9.1 Critical EPSS 7.8% KEV · Not listed
Vendors
Php Redhat
Products
Php Rhel Software Collections
CVE-2016-1904

php: heap buffer overflow in escapeshell functions

Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow.

CVSS 3.0 · 7.3 High EPSS 2.7% KEV · Not listed
Vendors
Php
Products
Php
CVE-2016-2554

php: buffer overflow in handling of long link names in tar phar archives

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

CVSS 3.0 · 9.8 Critical EPSS 11.0% KEV · Not listed
Vendors
Php Redhat
Products
Php Rhel Software Collections
CVE-2016-3074

php: Signedness vulnerability causing heap overflow in libgd

Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 35.7% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2016-3078

php: Heap overflow caused by integer overflow when reading zip files in ZipArchive

Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted call to (1) getFromIndex or (2) getFromName in the ZipArchive class.

CVSS 3.1 · 9.8 Critical EPSS 56.1% KEV · Not listed
Vendors
Php
Products
Php