Логотип exploitDog
product: "php"
Консоль
Логотип exploitDog

exploitDog

product: "php"
PHP

PHPпопулярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

Релизный цикл, информация об уязвимостях

Продукт: PHP
Вендор: php

График релизов

8.18.28.38.4202120222023202420252026202720282029

Недавние уязвимости PHP

Количество 3 866

nvd логотип

CVE-2025-1217

6 месяцев назад

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.

CVSS3: 3.1
EPSS: Низкий
debian логотип

CVE-2025-1217

6 месяцев назад

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* ...

CVSS3: 3.1
EPSS: Низкий
ubuntu логотип

CVE-2025-1217

6 месяцев назад

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.

CVSS3: 3.1
EPSS: Низкий
redhat логотип

CVE-2025-1217

6 месяцев назад

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.

CVSS3: 3.7
EPSS: Низкий
github логотип

GHSA-rwp7-7vc6-8477

6 месяцев назад

Reference counting in php_request_shutdown causes Use-After-Free

EPSS: Низкий
github логотип

GHSA-wg4p-4hqh-c3g9

6 месяцев назад

Possible out of bounds read when XML_OPTION_SKIP_TAGSTART used

EPSS: Низкий
github логотип

GHSA-p3x9-6h7p-cgfc

6 месяцев назад

libxml streams use wrong `content-type` header when requesting a redirected resource

EPSS: Низкий
github логотип

GHSA-hgf5-96fm-v528

6 месяцев назад

Stream HTTP wrapper header check might omit basic auth header

EPSS: Низкий
github логотип

GHSA-52jp-hrpf-2jff

6 месяцев назад

Stream HTTP wrapper truncate redirect location to 1024 bytes

EPSS: Низкий
github логотип

GHSA-pcmh-g36c-qc44

6 месяцев назад

Streams HTTP wrapper does not fail for headers with invalid name and no colon

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2025-1217

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.

CVSS3: 3.1
0%
Низкий
6 месяцев назад
debian логотип
CVE-2025-1217

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* ...

CVSS3: 3.1
0%
Низкий
6 месяцев назад
ubuntu логотип
CVE-2025-1217

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.

CVSS3: 3.1
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2025-1217

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.

CVSS3: 3.7
0%
Низкий
6 месяцев назад
github логотип
GHSA-rwp7-7vc6-8477

Reference counting in php_request_shutdown causes Use-After-Free

0%
Низкий
6 месяцев назад
github логотип
GHSA-wg4p-4hqh-c3g9

Possible out of bounds read when XML_OPTION_SKIP_TAGSTART used

6 месяцев назад
github логотип
GHSA-p3x9-6h7p-cgfc

libxml streams use wrong `content-type` header when requesting a redirected resource

0%
Низкий
6 месяцев назад
github логотип
GHSA-hgf5-96fm-v528

Stream HTTP wrapper header check might omit basic auth header

0%
Низкий
6 месяцев назад
github логотип
GHSA-52jp-hrpf-2jff

Stream HTTP wrapper truncate redirect location to 1024 bytes

0%
Низкий
6 месяцев назад
github логотип
GHSA-pcmh-g36c-qc44

Streams HTTP wrapper does not fail for headers with invalid name and no colon

0%
Низкий
6 месяцев назад

Уязвимостей на страницу


Поделиться