Поиск уязвимостей
Количество 40
Количество 40
BDU:2025-02829
Уязвимость функций php_libxml_input_buffer_create_filename() и php_libxml_sniff_charset_from_stream() интерпретатора языка программирования PHP, позволяющая нарушителю перенаправить пользователя на произвольный URL-адрес
ALT-PU-2025-16583
ALT-PU-2025-16583: package `php8.1-soap` update to version 8.1.32-alt1
ALT-PU-2025-16576
ALT-PU-2025-16576: package `php8.2-soap` update to version 8.2.28-alt1
ALT-PU-2025-16487
ALT-PU-2025-16487: package `php8.1-soap` update to version 8.1.32-alt1
ALT-PU-2025-16436
ALT-PU-2025-16436: package `php8.2-soap` update to version 8.2.28-alt1
ALT-PU-2025-4565
ALT-PU-2025-4565: package `php8.1` update to version 8.1.32-alt1
ALT-PU-2025-4377
ALT-PU-2025-4377: package `php8.1` update to version 8.1.32-alt1
ALT-PU-2025-4317
ALT-PU-2025-4317: package `php8.2` update to version 8.2.28-alt1
ALT-PU-2025-4202
ALT-PU-2025-4202: package `php8.2` update to version 8.2.28-alt1
ALT-PU-2025-16496
ALT-PU-2025-16496: package `php8.3-soap` update to version 8.3.19-alt1
ROS-20250430-12
Множественные уязвимости php 8.3
ROS-20250430-11
Множественные уязвимости php 8.2
ROS-20250430-10
Множественные уязвимости php 8.1
ALT-PU-2025-4406
ALT-PU-2025-4406: package `php8.4` update to version 8.4.5-alt1
ALT-PU-2025-4313
ALT-PU-2025-4313: package `php8.3` update to version 8.3.18-alt1
ALT-PU-2025-16476
ALT-PU-2025-16476: package `php8.4-soap` update to version 8.4.5-alt1
CVE-2025-1219
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.
CVE-2025-1219
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.
CVE-2025-1219
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.
CVE-2025-1219
libxml streams use wrong content-type header when requesting a redirected resource
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-02829 Уязвимость функций php_libxml_input_buffer_create_filename() и php_libxml_sniff_charset_from_stream() интерпретатора языка программирования PHP, позволяющая нарушителю перенаправить пользователя на произвольный URL-адрес | CVSS3: 3.5 | 1% Низкий | больше 1 года назад |
| ALT-PU-2025-16583 ALT-PU-2025-16583: package `php8.1-soap` update to version 8.1.32-alt1 | CVSS3: 7.3 | больше 1 года назад | |
| ALT-PU-2025-16576 ALT-PU-2025-16576: package `php8.2-soap` update to version 8.2.28-alt1 | CVSS3: 7.3 | больше 1 года назад | |
| ALT-PU-2025-16487 ALT-PU-2025-16487: package `php8.1-soap` update to version 8.1.32-alt1 | CVSS3: 7.3 | больше 1 года назад | |
| ALT-PU-2025-16436 ALT-PU-2025-16436: package `php8.2-soap` update to version 8.2.28-alt1 | CVSS3: 7.3 | больше 1 года назад | |
| ALT-PU-2025-4565 ALT-PU-2025-4565: package `php8.1` update to version 8.1.32-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-4377 ALT-PU-2025-4377: package `php8.1` update to version 8.1.32-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-4317 ALT-PU-2025-4317: package `php8.2` update to version 8.2.28-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-4202 ALT-PU-2025-4202: package `php8.2` update to version 8.2.28-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-16496 ALT-PU-2025-16496: package `php8.3-soap` update to version 8.3.19-alt1 | CVSS3: 8.1 | больше 1 года назад | |
 | ROS-20250430-12 Множественные уязвимости php 8.3 | CVSS3: 6.5 | больше 1 года назад | |
| ROS-20250430-11 Множественные уязвимости php 8.2 | CVSS3: 6.5 | больше 1 года назад | |
| ROS-20250430-10 Множественные уязвимости php 8.1 | CVSS3: 6.5 | больше 1 года назад | |
| ALT-PU-2025-4406 ALT-PU-2025-4406: package `php8.4` update to version 8.4.5-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-4313 ALT-PU-2025-4313: package `php8.3` update to version 8.3.18-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-16476 ALT-PU-2025-16476: package `php8.4-soap` update to version 8.4.5-alt1 | CVSS3: 9.8 | больше 1 года назад | |
 | CVE-2025-1219 In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations. | CVSS3: 5.3 | 1% Низкий | больше 1 года назад |
 | CVE-2025-1219 In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations. | CVSS3: 3.7 | 1% Низкий | больше 1 года назад |
 | CVE-2025-1219 In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations. | CVSS3: 5.3 | 1% Низкий | больше 1 года назад |
 | CVE-2025-1219 libxml streams use wrong content-type header when requesting a redirected resource | CVSS3: 5.3 | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу