Поиск уязвимостей
Количество 49
Количество 49
BDU:2025-11445
Уязвимость функции proc_open() интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольные команды
RLSA-2024:10951
Moderate: php:8.2 security update
RLSA-2024:10950
Moderate: php:8.1 security update
RLSA-2024:10949
Moderate: php:8.2 security update
ELSA-2024-10951
ELSA-2024-10951: php:8.2 security update (MODERATE)
ELSA-2024-10950
ELSA-2024-10950: php:8.1 security update (MODERATE)
ELSA-2024-10949
ELSA-2024-10949: php:8.2 security update (MODERATE)
ELSA-2025-7315
ELSA-2025-7315: php security update (MODERATE)
RLSA-2024:10952
Moderate: php:7.4 security update
ELSA-2024-10952
ELSA-2024-10952: php:7.4 security update (MODERATE)
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
CVE-2024-2756
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisor ...
CVE-2024-3096
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.
CVE-2024-3096
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.
CVE-2024-3096
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.
CVE-2024-3096
PHP function password_verify can erroneously return true when argument contains NUL
CVE-2024-3096
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-11445 Уязвимость функции proc_open() интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольные команды | CVSS3: 9.4 | 33% Средний | больше 2 лет назад |
 | RLSA-2024:10951 Moderate: php:8.2 security update | почти 2 года назад | ||
| RLSA-2024:10950 Moderate: php:8.1 security update | почти 2 года назад | ||
| RLSA-2024:10949 Moderate: php:8.2 security update | почти 2 года назад | ||
| ELSA-2024-10951 ELSA-2024-10951: php:8.2 security update (MODERATE) | почти 2 года назад | ||
| ELSA-2024-10950 ELSA-2024-10950: php:8.1 security update (MODERATE) | почти 2 года назад | ||
| ELSA-2024-10949 ELSA-2024-10949: php:8.2 security update (MODERATE) | почти 2 года назад | ||
| ELSA-2025-7315 ELSA-2025-7315: php security update (MODERATE) | больше 1 года назад | ||
| RLSA-2024:10952 Moderate: php:7.4 security update | почти 2 года назад | ||
| ELSA-2024-10952 ELSA-2024-10952: php:7.4 security update (MODERATE) | почти 2 года назад | ||
 | CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications. | CVSS3: 6.5 | 38% Средний | больше 2 лет назад |
 | CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications. | CVSS3: 6.5 | 38% Средний | больше 2 лет назад |
 | CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications. | CVSS3: 6.5 | 38% Средний | больше 2 лет назад |
 | CVSS3: 6.5 | 38% Средний | больше 2 лет назад | |
| CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisor ... | CVSS3: 6.5 | 38% Средний | больше 2 лет назад |
| CVE-2024-3096 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true. | CVSS3: 6.5 | 1% Низкий | больше 2 лет назад |
| CVE-2024-3096 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true. | CVSS3: 4.8 | 1% Низкий | больше 2 лет назад |
| CVE-2024-3096 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true. | CVSS3: 6.5 | 1% Низкий | больше 2 лет назад |
| CVE-2024-3096 PHP function password_verify can erroneously return true when argument contains NUL | CVSS3: 6.5 | 1% Низкий | 9 месяцев назад |
| CVE-2024-3096 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before ... | CVSS3: 6.5 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу