PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 867
CVE-2011-1467
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfm ...
CVE-2011-1466
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
CVE-2011-1466
Integer overflow in the SdnToJulian function in the Calendar extension ...
CVE-2011-1464
Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.
CVE-2011-1464
Buffer overflow in the strval function in PHP before 5.3.6, when the p ...
CVE-2011-0708
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
CVE-2011-0708
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms p ...
CVE-2011-0421
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
CVE-2011-0421
The _zip_name_locate function in zip_name_locate.c in the Zip extensio ...
CVE-2011-1466
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2011-1467 Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfm ... | CVSS2: 5 | 8% Низкий | больше 14 лет назад | |
CVE-2011-1466 Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function. | CVSS2: 5 | 26% Средний | больше 14 лет назад | |
CVE-2011-1466 Integer overflow in the SdnToJulian function in the Calendar extension ... | CVSS2: 5 | 26% Средний | больше 14 лет назад | |
CVE-2011-1464 Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument. | CVSS2: 4.3 | 1% Низкий | больше 14 лет назад | |
CVE-2011-1464 Buffer overflow in the strval function in PHP before 5.3.6, when the p ... | CVSS2: 4.3 | 1% Низкий | больше 14 лет назад | |
CVE-2011-0708 exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read. | CVSS2: 4.3 | 11% Средний | больше 14 лет назад | |
CVE-2011-0708 exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms p ... | CVSS2: 4.3 | 11% Средний | больше 14 лет назад | |
CVE-2011-0421 The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation. | CVSS2: 4.3 | 10% Низкий | больше 14 лет назад | |
CVE-2011-0421 The _zip_name_locate function in zip_name_locate.c in the Zip extensio ... | CVSS2: 4.3 | 10% Низкий | больше 14 лет назад | |
CVE-2011-1466 Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function. | CVSS2: 5 | 26% Средний | больше 14 лет назад |
Уязвимостей на страницу