PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 867
CVE-2016-4544
The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
CVE-2016-4544
The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP befor ...
CVE-2016-4543
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
CVE-2016-4543
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before ...
CVE-2016-4542
The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
CVE-2016-4542
The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5 ...
CVE-2016-4541
The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
CVE-2016-4541
The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in ...
CVE-2016-4540
The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
CVE-2016-4540
The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c i ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2016-4544 The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data. | CVSS3: 9.8 | 4% Низкий | больше 9 лет назад |
| CVE-2016-4544 The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP befor ... | CVSS3: 9.8 | 4% Низкий | больше 9 лет назад |
| CVE-2016-4543 The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data. | CVSS3: 9.8 | 2% Низкий | больше 9 лет назад |
| CVE-2016-4543 The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before ... | CVSS3: 9.8 | 2% Низкий | больше 9 лет назад |
| CVE-2016-4542 The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data. | CVSS3: 9.8 | 1% Низкий | больше 9 лет назад |
| CVE-2016-4542 The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5 ... | CVSS3: 9.8 | 1% Низкий | больше 9 лет назад |
| CVE-2016-4541 The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset. | CVSS3: 9.8 | 1% Низкий | больше 9 лет назад |
| CVE-2016-4541 The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in ... | CVSS3: 9.8 | 1% Низкий | больше 9 лет назад |
| CVE-2016-4540 The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset. | CVSS3: 9.8 | 1% Низкий | больше 9 лет назад |
| CVE-2016-4540 The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c i ... | CVSS3: 9.8 | 1% Низкий | больше 9 лет назад |
Уязвимостей на страницу