Логотип exploitDog
product: "php"
Консоль
Логотип exploitDog

exploitDog

product: "php"
PHP

PHPпопулярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

Релизный цикл, информация об уязвимостях

Продукт: PHP
Вендор: php

График релизов

8.18.28.38.4202120222023202420252026202720282029

Недавние уязвимости PHP

Количество 3 799

nvd логотип

CVE-2008-1384

больше 17 лет назад

Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the php_sprintf_appendstring function in formatted_print.c and probably other functions for formatted strings (aka *printf functions).

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2008-1384

больше 17 лет назад

Integer overflow in PHP 5.2.5 and earlier allows context-dependent att ...

CVSS2: 5
EPSS: Низкий
ubuntu логотип

CVE-2008-1384

больше 17 лет назад

Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the php_sprintf_appendstring function in formatted_print.c and probably other functions for formatted strings (aka *printf functions).

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2007-4850

больше 17 лет назад

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.

CVSS2: 5
EPSS: Средний
debian логотип

CVE-2007-4850

больше 17 лет назад

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5. ...

CVSS2: 5
EPSS: Средний
ubuntu логотип

CVE-2007-4850

больше 17 лет назад

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.

CVSS2: 5
EPSS: Средний
redhat логотип

CVE-2007-4850

больше 17 лет назад

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.

EPSS: Средний
nvd логотип

CVE-2008-0145

больше 17 лет назад

Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2008-0145

больше 17 лет назад

Unspecified vulnerability in glob in PHP before 4.4.8, when open_based ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2008-0145

больше 17 лет назад

Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663.

CVSS2: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2008-1384

Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the php_sprintf_appendstring function in formatted_print.c and probably other functions for formatted strings (aka *printf functions).

CVSS2: 5
2%
Низкий
больше 17 лет назад
debian логотип
CVE-2008-1384

Integer overflow in PHP 5.2.5 and earlier allows context-dependent att ...

CVSS2: 5
2%
Низкий
больше 17 лет назад
ubuntu логотип
CVE-2008-1384

Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the php_sprintf_appendstring function in formatted_print.c and probably other functions for formatted strings (aka *printf functions).

CVSS2: 5
2%
Низкий
больше 17 лет назад
nvd логотип
CVE-2007-4850

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.

CVSS2: 5
10%
Средний
больше 17 лет назад
debian логотип
CVE-2007-4850

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5. ...

CVSS2: 5
10%
Средний
больше 17 лет назад
ubuntu логотип
CVE-2007-4850

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.

CVSS2: 5
10%
Средний
больше 17 лет назад
redhat логотип
CVE-2007-4850

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.

10%
Средний
больше 17 лет назад
nvd логотип
CVE-2008-0145

Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663.

CVSS2: 7.5
0%
Низкий
больше 17 лет назад
debian логотип
CVE-2008-0145

Unspecified vulnerability in glob in PHP before 4.4.8, when open_based ...

CVSS2: 7.5
0%
Низкий
больше 17 лет назад
ubuntu логотип
CVE-2008-0145

Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663.

CVSS2: 7.5
0%
Низкий
больше 17 лет назад

Уязвимостей на страницу


Поделиться