Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 816

Export CSV
CVE-2016-9933

gd: Stack overflow in gdImageFillToBorder on truecolor images

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.

CVSS 3.0 · 7.5 High EPSS 6.9% KEV · Not listed
Vendors
Libgd Php Redhat
Products
Libgd Php Rhel Software Collections
CVE-2010-2097

PHP: iconv_mime_decode(), iconv_substr(), iconv_mime_encode() interruption flaws (MOPS-2010-032 MOPS-2010-033 MOPS-2010-034)

The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-4156

php information disclosure via mb_strcut()

The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length parameter).

CVSS 2.0 · 5.0 Medium EPSS 12.8% KEV · Not listed
Vendors
Php Redhat Scottmac
Products
Php Enterprise Linux Libmbfl
CVE-2010-4150

php: Double free in the imap extension

Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 6.3% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-3870

php: XSS mitigation bypass via utf8_decode()

The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.

CVSS 2.0 · 6.8 Medium EPSS 11.3% KEV · Not listed
Vendors
Canonical Php Redhat
Products
Ubuntu Linux Php Enterprise Linux
CVE-2010-3710

php: DoS in filter_var() via long email string

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux
CVE-2010-3709

php: NULL pointer dereference in ZipArchive::getArchiveComment

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

CVSS 2.0 · 4.3 Medium EPSS 13.3% KEV · Not listed
Vendors
Canonical Php Redhat
Products
Ubuntu Linux Php Enterprise Linux
CVE-2010-3436

php: open_basedir bypass via fopen_wrappers.c

fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename.

CVSS 2.0 · 5.0 Medium EPSS 6.3% KEV · Not listed
Vendors
Canonical Php
Products
Ubuntu Linux Php
CVE-2010-3065

php: session serializer session data injection vulnerability (MOPS-2010-060)

The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which allows context-dependent attackers to modify arbitrary session variables via a crafted session variable name.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux
CVE-2010-3064

php: mysqlnd: multiple buffer overflows (MOPS-2010-05[789])

Stack-based buffer overflow in the php_mysqlnd_auth_write function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) username or (2) database name argument to the (a) mysql_connect or (b) mysqli_connect function.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-3063

php: mysqlnd: multiple buffer overflows (MOPS-2010-05[789])

The php_mysqlnd_read_error_from_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length, which allows context-dependent attackers to trigger a heap-based buffer overflow via crafted inputs that cause a negative length value to be used.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-3062

php: mysqlnd: php_mysqlnd_ok_read() information leak (MOPS-2010-056)

mysqlnd_wireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers to (1) read sensitive memory via a modified length value, which is not properly handled by the php_mysqlnd_ok_read function; or (2) trigger a heap-based buffer overflow via a modified length value, which is not properly handled by the php_mysqlnd_rset_header_read function.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2950

php: Format string flaw in phar extension via phar_stream_flush() (MOPS-2010-024)

Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.

CVSS 2.0 · 6.8 Medium EPSS 5.7% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux
CVE-2010-2531

php: information leak vulnerability in var_export()

The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.

CVSS 2.0 · 4.3 Medium EPSS 5.0% KEV · Not listed
Vendors
Debian Php Redhat
Products
Debian Linux Php Enterprise Linux
CVE-2010-2484

php: strrchr() interruption vulnerability

The strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler.

CVSS 2.0 · 5.0 Medium EPSS 1.8% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2225

php: SplObjectStorage unserialization flaws (MOPS-2010-061)

Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.

CVSS 2.0 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2191

php: multiple interruption vulnerabilities (MOPS-2010-0[49,50,51,52,53,54,55])

The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) ZEND_ASSIGN_CONCAT opcodes; and the (8) ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler. NOTE: vectors 2 through 4 are related to the call time pass by reference feature.

CVSS 2.0 · 6.4 Medium EPSS 2.4% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2190

php: interruption vulnerabilities in trim and substr_replace (MOPS-2010-047, MOPS-2010-048)

The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2101

php: multiple interruption vulnerabilities (MOPS-2010-04[123456])

The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2100

php: multiple interruption vulnerabilities (MOPS-2010-03[6789], MOPS-2010-040)

The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Php
Products
Php