Поиск уязвимостей
Количество 49
Количество 49
CVE-2022-31625
Freeing unallocated memory in php_pgsql_free_params()
CVE-2022-31625
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x belo ...
CVE-2022-31626
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
CVE-2022-31626
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
CVE-2022-31626
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
CVE-2022-31626
mysqlnd/pdo password buffer overflow
CVE-2022-31626
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x belo ...
ROS-20220826-01
Множественные уязвимости PHP
SUSE-SU-2022:4069-1
Security update for php7
SUSE-SU-2022:4068-1
Security update for php74
RLSA-2022:6158
Moderate: php:7.4 security update
GHSA-wg63-8xjw-5wvx
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.
ELSA-2022-6158
ELSA-2022-6158: php:7.4 security update (MODERATE)
BDU:2022-05351
Уязвимость функции pg_query_params() интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код
RLSA-2022:5904
Important: php security update
RLSA-2022:5468
Important: php:8.0 security update
RLSA-2022:5467
Important: php:7.4 security update
GHSA-jfc6-9gw3-fhfg
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
ELSA-2022-5904
ELSA-2022-5904: php security update (IMPORTANT)
ELSA-2022-5468
ELSA-2022-5468: php:8.0 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-31625 Freeing unallocated memory in php_pgsql_free_params() | CVSS3: 8.1 | 4% Низкий | около 1 года назад |
| CVE-2022-31625 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x belo ... | CVSS3: 8.1 | 4% Низкий | больше 4 лет назад |
 | CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability. | CVSS3: 8.8 | 58% Средний | больше 4 лет назад |
 | CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability. | CVSS3: 8.8 | 58% Средний | больше 4 лет назад |
 | CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability. | CVSS3: 8.8 | 58% Средний | больше 4 лет назад |
| CVE-2022-31626 mysqlnd/pdo password buffer overflow | CVSS3: 7.5 | 58% Средний | около 1 года назад |
| CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x belo ... | CVSS3: 8.8 | 58% Средний | больше 4 лет назад |
 | ROS-20220826-01 Множественные уязвимости PHP | около 4 лет назад | ||
 | SUSE-SU-2022:4069-1 Security update for php7 | почти 4 года назад | ||
| SUSE-SU-2022:4068-1 Security update for php74 | почти 4 года назад | ||
 | RLSA-2022:6158 Moderate: php:7.4 security update | 4% Низкий | около 4 лет назад | |
| GHSA-wg63-8xjw-5wvx In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service. | CVSS3: 9.8 | 4% Низкий | больше 4 лет назад |
| ELSA-2022-6158 ELSA-2022-6158: php:7.4 security update (MODERATE) | 4% Низкий | около 4 лет назад | |
 | BDU:2022-05351 Уязвимость функции pg_query_params() интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 4% Низкий | больше 4 лет назад |
| RLSA-2022:5904 Important: php security update | 58% Средний | больше 4 лет назад | |
| RLSA-2022:5468 Important: php:8.0 security update | 58% Средний | больше 4 лет назад | |
| RLSA-2022:5467 Important: php:7.4 security update | 58% Средний | больше 4 лет назад | |
| GHSA-jfc6-9gw3-fhfg In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability. | CVSS3: 8.8 | 58% Средний | больше 4 лет назад |
| ELSA-2022-5904 ELSA-2022-5904: php security update (IMPORTANT) | 58% Средний | больше 4 лет назад | |
| ELSA-2022-5468 ELSA-2022-5468: php:8.0 security update (IMPORTANT) | 58% Средний | больше 4 лет назад |
Уязвимостей на страницу