Поиск уязвимостей
Количество 32
Количество 32
openSUSE-SU-2021:2795-1
Security update for php7
SUSE-SU-2021:2795-1
Security update for php7
SUSE-SU-2021:2638-1
Security update for php72
GHSA-q773-v75g-5rqg
In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.
BDU:2021-03559
Уязвимость модуля pdo_firebase интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2021:2575-1
Security update for php7
SUSE-SU-2021:2564-1
Security update for php72
GHSA-rxcr-7xjm-f9c9
In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially leading to other security implications - like contacting a wrong server or making a wrong access decision.
BDU:2021-03703
Уязвимость функции php_url_parse_ex() интерпретатора языка программирования PHP, позволяющая нарушителю осуществить SSRF-атаку
RLSA-2022:1935
Moderate: php:7.4 security update
ELSA-2022-1935
ELSA-2022-1935: php:7.4 security update (MODERATE)
SUSE-SU-2022:4067-1
Security update for php7
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2021:2795-1 Security update for php7 | 2% Низкий | около 5 лет назад | |
| SUSE-SU-2021:2795-1 Security update for php7 | 2% Низкий | около 5 лет назад | |
| SUSE-SU-2021:2638-1 Security update for php72 | 2% Низкий | больше 5 лет назад | |
| GHSA-q773-v75g-5rqg In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption. | CVSS3: 5.9 | 2% Низкий | больше 4 лет назад |
 | BDU:2021-03559 Уязвимость модуля pdo_firebase интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.9 | 2% Низкий | больше 5 лет назад |
| openSUSE-SU-2021:2575-1 Security update for php7 | 2% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:2564-1 Security update for php72 | 2% Низкий | больше 5 лет назад | |
| GHSA-rxcr-7xjm-f9c9 In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially leading to other security implications - like contacting a wrong server or making a wrong access decision. | CVSS3: 5.3 | 2% Низкий | больше 4 лет назад |
| BDU:2021-03703 Уязвимость функции php_url_parse_ex() интерпретатора языка программирования PHP, позволяющая нарушителю осуществить SSRF-атаку | CVSS3: 5.3 | 2% Низкий | больше 5 лет назад |
 | RLSA-2022:1935 Moderate: php:7.4 security update | больше 4 лет назад | ||
| ELSA-2022-1935 ELSA-2022-1935: php:7.4 security update (MODERATE) | больше 4 лет назад | ||
| SUSE-SU-2022:4067-1 Security update for php7 | почти 4 года назад |
Уязвимостей на страницу