PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 866

CVE-2011-1471
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.
CVE-2011-1471
Integer signedness error in zip_stream.c in the Zip extension in PHP b ...

CVE-2011-1470
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.
CVE-2011-1470
The Zip extension in PHP before 5.3.6 allows context-dependent attacke ...

CVE-2011-1469
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
CVE-2011-1469
Unspecified vulnerability in the Streams component in PHP before 5.3.6 ...

CVE-2011-1468
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.
CVE-2011-1468
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 mig ...

CVE-2011-1467
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.
CVE-2011-1467
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfm ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
---|---|---|---|---|
![]() | CVE-2011-1471 Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls. | CVSS2: 4.3 | 15% Средний | больше 14 лет назад |
CVE-2011-1471 Integer signedness error in zip_stream.c in the Zip extension in PHP b ... | CVSS2: 4.3 | 15% Средний | больше 14 лет назад | |
![]() | CVE-2011-1470 The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function. | CVSS2: 4.3 | 5% Низкий | больше 14 лет назад |
CVE-2011-1470 The Zip extension in PHP before 5.3.6 allows context-dependent attacke ... | CVSS2: 4.3 | 5% Низкий | больше 14 лет назад | |
![]() | CVE-2011-1469 Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper. | CVSS2: 4.3 | 6% Низкий | больше 14 лет назад |
CVE-2011-1469 Unspecified vulnerability in the Streams component in PHP before 5.3.6 ... | CVSS2: 4.3 | 6% Низкий | больше 14 лет назад | |
![]() | CVE-2011-1468 Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function. | CVSS2: 4.3 | 13% Средний | больше 14 лет назад |
CVE-2011-1468 Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 mig ... | CVSS2: 4.3 | 13% Средний | больше 14 лет назад | |
![]() | CVE-2011-1467 Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409. | CVSS2: 5 | 10% Средний | больше 14 лет назад |
CVE-2011-1467 Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfm ... | CVSS2: 5 | 10% Средний | больше 14 лет назад |
Уязвимостей на страницу