PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 883
CVE-2020-7068
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
CVE-2020-7068
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below ...
CVE-2020-7068
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
openSUSE-SU-2020:1356-1
Security update for php7
openSUSE-SU-2020:1354-1
Security update for php7
CVE-2020-11579
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.
SUSE-SU-2020:2477-1
Security update for php5
SUSE-SU-2020:2456-1
Security update for php7
SUSE-SU-2020:2455-1
Security update for php7
SUSE-SU-2020:2405-1
Security update for php72
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2020-7068 In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure. | CVSS3: 4.8 | 1% Низкий | больше 5 лет назад |
| CVE-2020-7068 In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below ... | CVSS3: 4.8 | 1% Низкий | больше 5 лет назад |
 | CVE-2020-7068 In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure. | CVSS3: 4.8 | 1% Низкий | больше 5 лет назад |
 | openSUSE-SU-2020:1356-1 Security update for php7 | 1% Низкий | больше 5 лет назад | |
| openSUSE-SU-2020:1354-1 Security update for php7 | 1% Низкий | больше 5 лет назад | |
| CVE-2020-11579 An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled. | CVSS3: 7.5 | 37% Средний | больше 5 лет назад |
| SUSE-SU-2020:2477-1 Security update for php5 | 1% Низкий | больше 5 лет назад | |
| SUSE-SU-2020:2456-1 Security update for php7 | 1% Низкий | больше 5 лет назад | |
| SUSE-SU-2020:2455-1 Security update for php7 | 1% Низкий | больше 5 лет назад | |
| SUSE-SU-2020:2405-1 Security update for php72 | 1% Низкий | больше 5 лет назад |
Уязвимостей на страницу