Логотип exploitDog
product: "php"
Консоль
Логотип exploitDog

exploitDog

product: "php"
PHP

PHPпопулярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

Релизный цикл, информация об уязвимостях

Продукт: PHP
Вендор: php

График релизов

8.18.28.38.4202120222023202420252026202720282029

Недавние уязвимости PHP

Количество 3 867

suse-cvrf логотип

openSUSE-SU-2018:2648-1

около 7 лет назад

Security update for php7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:2640-1

около 7 лет назад

Security update for php7

EPSS: Низкий
nvd логотип

CVE-2018-15132

больше 7 лет назад

An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2018-15132

больше 7 лет назад

An issue was discovered in ext/standard/link_win32.c in PHP before 5.6 ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2018-15132

больше 7 лет назад

An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2022-02426

больше 7 лет назад

Уязвимость компонента ext/standard/link_win32.c интерпретатора языка программирования PHP, позволяющая нарушителю нарушить конфиденциальность данных

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2018-14884

больше 7 лет назад

An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because http_header_value in ext/standard/http_fopen_wrapper.c can be a NULL value that is mishandled in an atoi call.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2018-14884

больше 7 лет назад

An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.1 ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2018-14883

больше 7 лет назад

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.

CVSS3: 7.5
EPSS: Средний
debian логотип

CVE-2018-14883

больше 7 лет назад

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1 ...

CVSS3: 7.5
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
suse-cvrf логотип
openSUSE-SU-2018:2648-1

Security update for php7

0%
Низкий
около 7 лет назад
suse-cvrf логотип
SUSE-SU-2018:2640-1

Security update for php7

0%
Низкий
около 7 лет назад
nvd логотип
CVE-2018-15132

An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.

CVSS3: 7.5
4%
Низкий
больше 7 лет назад
debian логотип
CVE-2018-15132

An issue was discovered in ext/standard/link_win32.c in PHP before 5.6 ...

CVSS3: 7.5
4%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2018-15132

An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.

CVSS3: 7.5
4%
Низкий
больше 7 лет назад
fstec логотип
BDU:2022-02426

Уязвимость компонента ext/standard/link_win32.c интерпретатора языка программирования PHP, позволяющая нарушителю нарушить конфиденциальность данных

CVSS3: 7.5
4%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-14884

An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because http_header_value in ext/standard/http_fopen_wrapper.c can be a NULL value that is mishandled in an atoi call.

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
debian логотип
CVE-2018-14884

An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.1 ...

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-14883

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.

CVSS3: 7.5
20%
Средний
больше 7 лет назад
debian логотип
CVE-2018-14883

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1 ...

CVSS3: 7.5
20%
Средний
больше 7 лет назад

Уязвимостей на страницу


Поделиться