PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 4 093
CVE-2015-8617
Format string vulnerability in the zend_throw_or_error function in Zen ...
CVE-2015-6833
Directory traversal vulnerability in the PharData class in PHP before ...
CVE-2015-6831
Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5 ...
CVE-2015-6836
The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, ...
CVE-2015-6527
The php_str_replace_in_subject function in ext/standard/string.c in PH ...
CVE-2015-5590
Stack-based buffer overflow in the phar_fix_filepath function in ext/p ...
CVE-2016-1904
Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7. ...
CVE-2016-1903
The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolatio ...
CVE-2015-5590
Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension.
CVE-2015-6833
Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2015-8617 Format string vulnerability in the zend_throw_or_error function in Zen ... | CVSS3: 9.8 | 23% Средний | почти 11 лет назад |
| CVE-2015-6833 Directory traversal vulnerability in the PharData class in PHP before ... | CVSS3: 7.5 | 5% Низкий | почти 11 лет назад |
| CVE-2015-6831 Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5 ... | CVSS3: 7.3 | 7% Низкий | почти 11 лет назад |
| CVE-2015-6836 The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, ... | CVSS3: 7.3 | 10% Средний | почти 11 лет назад |
| CVE-2015-6527 The php_str_replace_in_subject function in ext/standard/string.c in PH ... | CVSS3: 7.3 | 4% Низкий | почти 11 лет назад |
| CVE-2015-5590 Stack-based buffer overflow in the phar_fix_filepath function in ext/p ... | CVSS3: 7.3 | 5% Низкий | почти 11 лет назад |
| CVE-2016-1904 Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7. ... | CVSS3: 7.3 | 3% Низкий | почти 11 лет назад |
| CVE-2016-1903 The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolatio ... | CVSS3: 9.1 | 8% Низкий | почти 11 лет назад |
 | CVE-2015-5590 Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension. | CVSS3: 7.3 | 5% Низкий | почти 11 лет назад |
| CVE-2015-6833 Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call. | CVSS3: 7.5 | 5% Низкий | почти 11 лет назад |
Уязвимостей на страницу