PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 889
CVE-2018-19935
ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function.
openSUSE-SU-2018:3062-1
Security update for php7
openSUSE-SU-2018:3056-1
Security update for php5
SUSE-SU-2018:3016-1
Security update for php7
SUSE-SU-2018:3017-1
Security update for php5
SUSE-SU-2018:3018-1
Security update for php53
openSUSE-SU-2018:2929-1
Security update for php7
SUSE-SU-2018:2887-1
Security update for php7
CVE-2018-17082
The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.
CVE-2018-17082
The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2018-19935 ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function. | CVSS3: 5.9 | 24% Средний | больше 7 лет назад |
 | openSUSE-SU-2018:3062-1 Security update for php7 | 8% Низкий | больше 7 лет назад | |
| openSUSE-SU-2018:3056-1 Security update for php5 | 8% Низкий | больше 7 лет назад | |
| SUSE-SU-2018:3016-1 Security update for php7 | 8% Низкий | больше 7 лет назад | |
| SUSE-SU-2018:3017-1 Security update for php5 | 8% Низкий | больше 7 лет назад | |
| SUSE-SU-2018:3018-1 Security update for php53 | 8% Низкий | больше 7 лет назад | |
| openSUSE-SU-2018:2929-1 Security update for php7 | 8% Низкий | больше 7 лет назад | |
| SUSE-SU-2018:2887-1 Security update for php7 | 8% Низкий | больше 7 лет назад | |
 | CVE-2018-17082 The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c. | CVSS3: 6.1 | 8% Низкий | больше 7 лет назад |
| CVE-2018-17082 The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x ... | CVSS3: 6.1 | 8% Низкий | больше 7 лет назад |
Уязвимостей на страницу