Поиск уязвимостей
Количество 42
Количество 42
RLSA-2026:56969
Important: php8.4 security, bug fix, and enhancement update
ELSA-2026-56969
ELSA-2026-56969: php8.4 security, bug fix, and enhancement update (IMPORTANT)
ALT-PU-2026-12843
ALT-PU-2026-12843: package `php8.5-soap` update to version 8.5.9-alt1
ALT-PU-2026-12842
ALT-PU-2026-12842: package `php8.4-soap` update to version 8.4.24-alt1
ALT-PU-2026-12287
ALT-PU-2026-12287: package `php8.4` update to version 8.4.24-alt1
ALT-PU-2026-12285
ALT-PU-2026-12285: package `php8.5` update to version 8.5.9-alt1
openSUSE-SU-2026:21532-1
Security update for php8
CVE-2026-17544
Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.
CVE-2026-17544
Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.
CVE-2026-17544
Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.
CVE-2026-17544
Attacker-provided inputs to bccomp() could lead to an out-of-bounds wr ...
CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
CVE-2026-17543
SQL injection in ext-pgsql via E'...' backslash breakout
CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would ...
GHSA-x692-q9x7-8c3f
Out-of-bounds write in bccomp() via crafted operand and scale
GHSA-7qpv-r5mr-78m4
SQL injection in ext-pgsql via E'...' backslash breakout
RLSA-2026:62614
Important: php security, bug fix, and enhancement update
RLSA-2026:62334
Important: php:7.4 security, bug fix, and enhancement update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2026:56969 Important: php8.4 security, bug fix, and enhancement update | 3 месяца назад | ||
| ELSA-2026-56969 ELSA-2026-56969: php8.4 security, bug fix, and enhancement update (IMPORTANT) | 3 месяца назад | ||
| ALT-PU-2026-12843 ALT-PU-2026-12843: package `php8.5-soap` update to version 8.5.9-alt1 | CVSS3: 9.8 | 3 месяца назад | |
| ALT-PU-2026-12842 ALT-PU-2026-12842: package `php8.4-soap` update to version 8.4.24-alt1 | CVSS3: 9.8 | 3 месяца назад | |
| ALT-PU-2026-12287 ALT-PU-2026-12287: package `php8.4` update to version 8.4.24-alt1 | CVSS3: 9.8 | 3 месяца назад | |
| ALT-PU-2026-12285 ALT-PU-2026-12285: package `php8.5` update to version 8.5.9-alt1 | CVSS3: 9.8 | 3 месяца назад | |
 | openSUSE-SU-2026:21532-1 Security update for php8 | 3 месяца назад | ||
 | CVE-2026-17544 Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9. | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-17544 Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-17544 Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9. | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-17544 Attacker-provided inputs to bccomp() could lead to an out-of-bounds wr ... | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. | CVSS3: 7.4 | 0% Низкий | 3 месяца назад |
| CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-17543 SQL injection in ext-pgsql via E'...' backslash breakout | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would ... | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
| GHSA-x692-q9x7-8c3f Out-of-bounds write in bccomp() via crafted operand and scale | 0% Низкий | 3 месяца назад | |
| GHSA-7qpv-r5mr-78m4 SQL injection in ext-pgsql via E'...' backslash breakout | 0% Низкий | 3 месяца назад | |
| RLSA-2026:62614 Important: php security, bug fix, and enhancement update | 2 месяца назад | ||
| RLSA-2026:62334 Important: php:7.4 security, bug fix, and enhancement update | 2 месяца назад |
Уязвимостей на страницу