PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 883
BDU:2020-03181
Уязвимость функции phar_tar_writeheaders_int (ext/phar/tar.c) интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код
CVE-2019-9641
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.
CVE-2019-9641
An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ...
CVE-2019-9640
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
CVE-2019-9640
An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ...
CVE-2019-9639
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
CVE-2019-9639
An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ...
CVE-2019-9638
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.
CVE-2019-9638
An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ...
CVE-2019-9637
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | BDU:2020-03181 Уязвимость функции phar_tar_writeheaders_int (ext/phar/tar.c) интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.1 | 1% Низкий | почти 7 лет назад |
 | CVE-2019-9641 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF. | CVSS3: 9.8 | 52% Средний | почти 7 лет назад |
| CVE-2019-9641 An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ... | CVSS3: 9.8 | 52% Средний | почти 7 лет назад |
| CVE-2019-9640 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn. | CVSS3: 7.5 | 16% Средний | почти 7 лет назад |
| CVE-2019-9640 An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ... | CVSS3: 7.5 | 16% Средний | почти 7 лет назад |
| CVE-2019-9639 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable. | CVSS3: 7.5 | 18% Средний | почти 7 лет назад |
| CVE-2019-9639 An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ... | CVSS3: 7.5 | 18% Средний | почти 7 лет назад |
| CVE-2019-9638 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len. | CVSS3: 7.5 | 17% Средний | почти 7 лет назад |
| CVE-2019-9638 An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ... | CVSS3: 7.5 | 17% Средний | почти 7 лет назад |
| CVE-2019-9637 An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data. | CVSS3: 7.5 | 12% Средний | почти 7 лет назад |
Уязвимостей на страницу