PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 4 083
CVE-2015-8391
The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
CVE-2015-8389
PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
CVE-2015-8386
PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
CVE-2015-8393
pcregrep in PCRE before 8.38 mishandles the -q option for binary files ...
CVE-2015-8390
PCRE before 8.38 mishandles the [: and \\ substrings in character clas ...
CVE-2015-8383
PCRE before 8.38 mishandles certain repeated conditional groups, which ...
CVE-2015-8391
The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishan ...
CVE-2015-8389
PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related pa ...
CVE-2015-8394
PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditi ...
CVE-2015-8386
PCRE before 8.38 mishandles the interaction of lookbehind assertions a ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2015-8391 The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. | CVSS3: 9.8 | 6% Низкий | почти 11 лет назад |
| CVE-2015-8389 PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. | CVSS3: 9.8 | 4% Низкий | почти 11 лет назад |
| CVE-2015-8386 PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. | CVSS3: 9.8 | 7% Низкий | почти 11 лет назад |
| CVE-2015-8393 pcregrep in PCRE before 8.38 mishandles the -q option for binary files ... | CVSS3: 7.5 | 4% Низкий | почти 11 лет назад |
| CVE-2015-8390 PCRE before 8.38 mishandles the [: and \\ substrings in character clas ... | CVSS3: 9.8 | 5% Низкий | почти 11 лет назад |
| CVE-2015-8383 PCRE before 8.38 mishandles certain repeated conditional groups, which ... | CVSS3: 9.8 | 6% Низкий | почти 11 лет назад |
| CVE-2015-8391 The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishan ... | CVSS3: 9.8 | 6% Низкий | почти 11 лет назад |
| CVE-2015-8389 PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related pa ... | CVSS3: 9.8 | 4% Низкий | почти 11 лет назад |
| CVE-2015-8394 PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditi ... | CVSS3: 9.8 | 5% Низкий | почти 11 лет назад |
| CVE-2015-8386 PCRE before 8.38 mishandles the interaction of lookbehind assertions a ... | CVSS3: 9.8 | 7% Низкий | почти 11 лет назад |
Уязвимостей на страницу