PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 4 000
CVE-2016-4544
The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP befor ...
CVE-2016-4543
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
CVE-2016-4543
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before ...
CVE-2016-4542
The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
CVE-2016-4542
The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5 ...
CVE-2016-4541
The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
CVE-2016-4541
The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in ...
CVE-2016-4540
The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
CVE-2016-4540
The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c i ...
CVE-2016-4539
The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2016-4544 The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP befor ... | CVSS3: 9.8 | 7% Низкий | около 10 лет назад |
 | CVE-2016-4543 The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data. | CVSS3: 9.8 | 12% Средний | около 10 лет назад |
| CVE-2016-4543 The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before ... | CVSS3: 9.8 | 12% Средний | около 10 лет назад |
| CVE-2016-4542 The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data. | CVSS3: 9.8 | 6% Низкий | около 10 лет назад |
| CVE-2016-4542 The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5 ... | CVSS3: 9.8 | 6% Низкий | около 10 лет назад |
| CVE-2016-4541 The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset. | CVSS3: 9.8 | 6% Низкий | около 10 лет назад |
| CVE-2016-4541 The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in ... | CVSS3: 9.8 | 6% Низкий | около 10 лет назад |
| CVE-2016-4540 The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset. | CVSS3: 9.8 | 6% Низкий | около 10 лет назад |
| CVE-2016-4540 The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c i ... | CVSS3: 9.8 | 6% Низкий | около 10 лет назад |
| CVE-2016-4539 The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero. | CVSS3: 9.8 | 6% Низкий | около 10 лет назад |
Уязвимостей на страницу