Поиск уязвимостей
Количество 41
Количество 41
RLSA-2023:2903
Moderate: php:7.4 security update
SUSE-SU-2022:3997-1
Security update for php7
CVE-2022-31629
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVE-2022-31629
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVE-2022-31629
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVE-2022-31629
$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities
CVE-2022-31629
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability en ...
CVE-2022-31628
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
CVE-2022-31628
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
CVE-2022-31628
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
CVE-2022-31628
phar wrapper can occur dos when using quine gzip file
CVE-2022-31628
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompresso ...
SUSE-SU-2022:4069-1
Security update for php7
SUSE-SU-2022:4068-1
Security update for php74
GHSA-cj46-35hf-rv96
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
GHSA-c43m-486j-j32p
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
BDU:2024-07319
Уязвимость языка программирования PHP, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2024-05844
Уязвимость интерпретатора языка программирования PHP, связанная с неправильной проверкой входных данных, позволяющая нарушителю устанавливать в браузере стандартный небезопасный файл cookie
ROS-20251124-03
Уязвимость php
ROS-20240730-07
Уязвимость php
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2023:2903 Moderate: php:7.4 security update | 11 месяцев назад | ||
 | SUSE-SU-2022:3997-1 Security update for php7 | почти 4 года назад | ||
 | CVE-2022-31629 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications. | CVSS3: 6.5 | 50% Средний | около 4 лет назад |
 | CVE-2022-31629 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications. | CVSS3: 6.5 | 50% Средний | около 4 лет назад |
 | CVE-2022-31629 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications. | CVSS3: 6.5 | 50% Средний | около 4 лет назад |
 | CVE-2022-31629 $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities | CVSS3: 6.5 | 50% Средний | около 1 года назад |
| CVE-2022-31629 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability en ... | CVSS3: 6.5 | 50% Средний | около 4 лет назад |
| CVE-2022-31628 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop. | CVSS3: 5.5 | 1% Низкий | около 4 лет назад |
| CVE-2022-31628 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop. | CVSS3: 4.4 | 1% Низкий | около 4 лет назад |
| CVE-2022-31628 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop. | CVSS3: 5.5 | 1% Низкий | около 4 лет назад |
| CVE-2022-31628 phar wrapper can occur dos when using quine gzip file | CVSS3: 2.3 | 1% Низкий | около 1 года назад |
| CVE-2022-31628 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompresso ... | CVSS3: 5.5 | 1% Низкий | около 4 лет назад |
| SUSE-SU-2022:4069-1 Security update for php7 | почти 4 года назад | ||
| SUSE-SU-2022:4068-1 Security update for php74 | почти 4 года назад | ||
| GHSA-cj46-35hf-rv96 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop. | CVSS3: 5.5 | 1% Низкий | около 4 лет назад |
| GHSA-c43m-486j-j32p In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications. | CVSS3: 6.5 | 50% Средний | около 4 лет назад |
 | BDU:2024-07319 Уязвимость языка программирования PHP, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 1% Низкий | больше 4 лет назад |
| BDU:2024-05844 Уязвимость интерпретатора языка программирования PHP, связанная с неправильной проверкой входных данных, позволяющая нарушителю устанавливать в браузере стандартный небезопасный файл cookie | CVSS3: 6.5 | 50% Средний | около 4 лет назад |
 | ROS-20251124-03 Уязвимость php | CVSS3: 5.5 | 1% Низкий | 12 месяцев назад |
| ROS-20240730-07 Уязвимость php | CVSS3: 6.5 | 50% Средний | больше 2 лет назад |
Уязвимостей на страницу