PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 4 082
CVE-2011-1466
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
CVE-2011-1467
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.
CVE-2011-1469
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
CVE-2011-1470
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.
CVE-2011-0421
The _zip_name_locate function in zip_name_locate.c in the Zip extensio ...
CVE-2011-1467
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfm ...
CVE-2011-1466
Integer overflow in the SdnToJulian function in the Calendar extension ...
CVE-2011-1464
Buffer overflow in the strval function in PHP before 5.3.6, when the p ...
CVE-2011-1470
The Zip extension in PHP before 5.3.6 allows context-dependent attacke ...
CVE-2011-1471
Integer signedness error in zip_stream.c in the Zip extension in PHP b ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2011-1466 Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function. | CVSS2: 5 | 6% Низкий | больше 15 лет назад |
| CVE-2011-1467 Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409. | CVSS2: 5 | 13% Средний | больше 15 лет назад |
| CVE-2011-1469 Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper. | CVSS2: 4.3 | 4% Низкий | больше 15 лет назад |
| CVE-2011-1470 The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function. | CVSS2: 4.3 | 10% Низкий | больше 15 лет назад |
| CVE-2011-0421 The _zip_name_locate function in zip_name_locate.c in the Zip extensio ... | CVSS2: 4.3 | 14% Средний | больше 15 лет назад |
| CVE-2011-1467 Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfm ... | CVSS2: 5 | 13% Средний | больше 15 лет назад |
| CVE-2011-1466 Integer overflow in the SdnToJulian function in the Calendar extension ... | CVSS2: 5 | 6% Низкий | больше 15 лет назад |
| CVE-2011-1464 Buffer overflow in the strval function in PHP before 5.3.6, when the p ... | CVSS2: 4.3 | 3% Низкий | больше 15 лет назад |
| CVE-2011-1470 The Zip extension in PHP before 5.3.6 allows context-dependent attacke ... | CVSS2: 4.3 | 10% Низкий | больше 15 лет назад |
| CVE-2011-1471 Integer signedness error in zip_stream.c in the Zip extension in PHP b ... | CVSS2: 4.3 | 13% Средний | больше 15 лет назад |
Уязвимостей на страницу