Количество 27
Количество 27
RLSA-2022:6542
Moderate: php:7.4 security update
ELSA-2022-7340
ELSA-2022-7340: php-pear security update (MODERATE)
ELSA-2022-6542
ELSA-2022-6542: php:7.4 security update (MODERATE)
CVE-2020-28948
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
CVE-2020-28948
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
CVE-2020-28948
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
CVE-2020-28948
Archive_Tar through 1.4.10 allows an unserialization attack because ph ...
GHSA-jh5x-hfhg-78jq
Deserialization of Untrusted Data in Archive_Tar
BDU:2021-03621
Уязвимость функции _maliciousFilename класса Archive_Tar библиотеки PHP классов PEAR, позволяющая нарушителю выполнить произвольный PHP-код
CVE-2020-28949
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
CVE-2020-28949
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
CVE-2020-28949
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
CVE-2020-28949
Archive_Tar through 1.4.10 has :// filename sanitization only to addre ...
CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Dir ...
GHSA-75c5-f4gw-38r9
Multiple vulnerabilities through filename manipulation in Archive_Tar
BDU:2021-03618
Уязвимость класса Archive_Tar библиотеки PHP классов PEAR, позволяющая нарушителю выполнить перезапись защищаемых файлов
openSUSE-SU-2021:3018-1
Security update for php7-pear
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2022:6542 Moderate: php:7.4 security update | почти 3 года назад | ||
| ELSA-2022-7340 ELSA-2022-7340: php-pear security update (MODERATE) | больше 2 лет назад | ||
| ELSA-2022-6542 ELSA-2022-6542: php:7.4 security update (MODERATE) | почти 3 года назад | ||
 | CVE-2020-28948 Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. | CVSS3: 7.8 | 74% Высокий | больше 4 лет назад |
 | CVE-2020-28948 Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. | CVSS3: 7.8 | 74% Высокий | больше 4 лет назад |
 | CVE-2020-28948 Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. | CVSS3: 7.8 | 74% Высокий | больше 4 лет назад |
| CVE-2020-28948 Archive_Tar through 1.4.10 allows an unserialization attack because ph ... | CVSS3: 7.8 | 74% Высокий | больше 4 лет назад |
| GHSA-jh5x-hfhg-78jq Deserialization of Untrusted Data in Archive_Tar | CVSS3: 7.8 | 74% Высокий | около 4 лет назад |
 | BDU:2021-03621 Уязвимость функции _maliciousFilename класса Archive_Tar библиотеки PHP классов PEAR, позволяющая нарушителю выполнить произвольный PHP-код | CVSS3: 8.8 | 74% Высокий | больше 4 лет назад |
| CVE-2020-28949 Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed. | CVSS3: 7.8 | 93% Критический | больше 4 лет назад |
| CVE-2020-28949 Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed. | CVSS3: 7.1 | 93% Критический | больше 4 лет назад |
| CVE-2020-28949 Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed. | CVSS3: 7.8 | 93% Критический | больше 4 лет назад |
| CVE-2020-28949 Archive_Tar through 1.4.10 has :// filename sanitization only to addre ... | CVSS3: 7.8 | 93% Критический | больше 4 лет назад |
| CVE-2020-36193 Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. | CVSS3: 7.5 | 81% Высокий | больше 4 лет назад |
| CVE-2020-36193 Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. | CVSS3: 7.5 | 81% Высокий | больше 4 лет назад |
| CVE-2020-36193 Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. | CVSS3: 7.5 | 81% Высокий | больше 4 лет назад |
| CVE-2020-36193 Tar.php in Archive_Tar through 1.4.11 allows write operations with Dir ... | CVSS3: 7.5 | 81% Высокий | больше 4 лет назад |
| GHSA-75c5-f4gw-38r9 Multiple vulnerabilities through filename manipulation in Archive_Tar | CVSS3: 7.8 | 93% Критический | около 4 лет назад |
| BDU:2021-03618 Уязвимость класса Archive_Tar библиотеки PHP классов PEAR, позволяющая нарушителю выполнить перезапись защищаемых файлов | CVSS3: 8.8 | 93% Критический | больше 4 лет назад |
 | openSUSE-SU-2021:3018-1 Security update for php7-pear | 81% Высокий | почти 4 года назад |
Уязвимостей на страницу