Логотип exploitDog
product: "php"
Консоль
Логотип exploitDog

exploitDog

product: "php"
PHP

PHPпопулярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

Релизный цикл, информация об уязвимостях

Продукт: PHP
Вендор: php

График релизов

8.28.38.48.5202220232024202520262027202820292030

Недавние уязвимости PHP

Количество 3 883

fstec логотип

BDU:2022-02615

почти 15 лет назад

Уязвимость функции SdnToJulian интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.7
EPSS: Средний
nvd логотип

CVE-2011-1148

почти 15 лет назад

Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2011-1148

почти 15 лет назад

Use-after-free vulnerability in the substr_replace function in PHP 5.3 ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2011-1148

почти 15 лет назад

Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2011-1153

почти 15 лет назад

Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2011-1153

почти 15 лет назад

Multiple format string vulnerabilities in phar_object.c in the phar ex ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2011-1153

почти 15 лет назад

Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2011-1092

почти 15 лет назад

Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2011-1092

почти 15 лет назад

Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows conte ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2011-1092

почти 15 лет назад

Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.

CVSS2: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
fstec логотип
BDU:2022-02615

Уязвимость функции SdnToJulian интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.7
26%
Средний
почти 15 лет назад
nvd логотип
CVE-2011-1148

Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.

CVSS2: 7.5
3%
Низкий
почти 15 лет назад
debian логотип
CVE-2011-1148

Use-after-free vulnerability in the substr_replace function in PHP 5.3 ...

CVSS2: 7.5
3%
Низкий
почти 15 лет назад
ubuntu логотип
CVE-2011-1148

Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.

CVSS2: 7.5
3%
Низкий
почти 15 лет назад
nvd логотип
CVE-2011-1153

Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.

CVSS2: 7.5
2%
Низкий
почти 15 лет назад
debian логотип
CVE-2011-1153

Multiple format string vulnerabilities in phar_object.c in the phar ex ...

CVSS2: 7.5
2%
Низкий
почти 15 лет назад
ubuntu логотип
CVE-2011-1153

Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.

CVSS2: 7.5
2%
Низкий
почти 15 лет назад
nvd логотип
CVE-2011-1092

Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.

CVSS2: 7.5
10%
Низкий
почти 15 лет назад
debian логотип
CVE-2011-1092

Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows conte ...

CVSS2: 7.5
10%
Низкий
почти 15 лет назад
ubuntu логотип
CVE-2011-1092

Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.

CVSS2: 7.5
10%
Низкий
почти 15 лет назад

Уязвимостей на страницу


Поделиться