Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 765

Export CSV
CVE-2012-0789

php: strtotime timezone memory leak

Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.

CVSS 2.0 · 5.0 Medium EPSS 8.0% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux
CVE-2010-2225

php: SplObjectStorage unserialization flaws (MOPS-2010-061)

Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.

CVSS 2.0 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2191

php: multiple interruption vulnerabilities (MOPS-2010-0[49,50,51,52,53,54,55])

The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) ZEND_ASSIGN_CONCAT opcodes; and the (8) ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler. NOTE: vectors 2 through 4 are related to the call time pass by reference feature.

CVSS 2.0 · 6.4 Medium EPSS 2.4% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2190

php: interruption vulnerabilities in trim and substr_replace (MOPS-2010-047, MOPS-2010-048)

The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2101

php: multiple interruption vulnerabilities (MOPS-2010-04[123456])

The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2100

php: multiple interruption vulnerabilities (MOPS-2010-03[6789], MOPS-2010-040)

The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2097

PHP: iconv_mime_decode(), iconv_substr(), iconv_mime_encode() interruption flaws (MOPS-2010-032 MOPS-2010-033 MOPS-2010-034)

The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2094

php: Multiple format string flaws in the phar extension (MOPS-2010-025 MOPS-2010-026 MOPS-2010-027 MOPS-2010-028)

Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the (1) phar_stream_flush, (2) phar_wrapper_unlink, (3) phar_parse_url, or (4) phar_wrapper_open_url functions in ext/phar/stream.c; and the (5) phar_wrapper_open_dir function in ext/phar/dirstream.c, which triggers errors in the php_stream_wrapper_log_error function.

CVSS 2.0 · 6.8 Medium EPSS 12.7% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2093

PHP: Context stream use-after-free on request shutdown (MOPS-2010-022)

Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Php
Products
Php
CVE-2013-4636

php: fileinfo: Invalid pointer dereference when checking mimetype of certain MP3 files

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Php
Products
Php
CVE-2013-6420

php: memory corruption in openssl_x509_parse()

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

CVSS 2.0 · 7.5 High EPSS 35.4% KEV · Not listed
Vendors
Apple Opensuse Php and 1 more
Products
Mac Os X Opensuse Php and 5 more
CVE-2010-1917

php: fnmatch long pattern stack memory exhaustion (MOPS-2010-021)

Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (PHP crash) via a crafted first argument to the fnmatch function, as demonstrated using a long string.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux
CVE-2013-6712

php: heap-based buffer over-read in DateInterval

The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.

CVSS 2.0 · 5.0 Medium EPSS 4.6% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Mac Os X Ubuntu Linux Debian Linux and 4 more
CVE-2013-7226

php: multiple vulnerabilities in gdImageCrop()

Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading to a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 6.7% KEV · Not listed
Vendors
Php
Products
Php
CVE-2013-7327

php: multiple vulnerabilities in gdImageCrop()

The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Php
Products
Ubuntu Linux Php
CVE-2013-7328

php: multiple vulnerabilities in gdImageCrop()

Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service (application crash) or obtain sensitive information via an imagecrop function call with a negative value for the (1) x or (2) y dimension, a different vulnerability than CVE-2013-7226.

CVSS 2.0 · 5.8 Medium EPSS 1.5% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-1915

php: preg_quote interruption vulnerability (MOPS-2010-017)

The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose values are not updated in the associated local variables, and access of previously-freed memory.

CVSS 2.0 · 5.0 Medium EPSS 1.1% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-1914

php: bitwise operators interruption vulnerabilities (MOPS-2010-014, MOPS-2010-015, MOPS-2010-016)

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the (1) ZEND_BW_XOR opcode (shift_left_function), (2) ZEND_SL opcode (bitwise_xor_function), or (3) ZEND_SR opcode (shift_right_function), related to the convert_to_long_base function.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-1868

php: sqlite: use of uninitialized memory triggered by empty SQL query (MOPS-2010-012, MOPS-2010-013)

The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory.

CVSS 2.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Php
Products
Php
CVE-2013-4635

php: Integer overflow in SndToJewish - DoS (excessive CPU use, interpreter hang)

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.

CVSS 2.0 · 5.0 Medium EPSS 4.2% KEV · Not listed
Vendors
Php
Products
Php