Поиск уязвимостей
Количество 47
Количество 47
CVE-2024-5585
Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)
CVE-2024-5585
In PHP versions8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before ...
CVE-2024-5458
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.
CVE-2024-5458
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.
CVE-2024-5458
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.
CVE-2024-5458
Filter bypass in filter_var (FILTER_VALIDATE_URL)
CVE-2024-5458
In PHP versions8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before ...
GHSA-9fcc-425m-g385
bypass CVE-2024-1874
BDU:2024-05512
Уязвимость функции proc_open() интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольные команды
SUSE-SU-2024:2039-1
Security update for php8
SUSE-SU-2024:2038-1
Security update for php8
SUSE-SU-2024:2027-1
Security update for php8
GHSA-w8qr-v226-r27w
Filter bypass in filter_var (FILTER_VALIDATE_URL)
BDU:2024-04846
Уязвимость функции filter_var интерпретатора языка программирования PHP, позволяющая нарушителю подменить URL-адреса с ошибочными данными
ROS-20240820-16
Уязвимость php 8.3
ROS-20240820-15
Уязвимость php 8.2
ROS-20240820-08
Уязвимость php 8.1
SUSE-SU-2024:2037-1
Security update for php7
RLSA-2024:10951
Moderate: php:8.2 security update
RLSA-2024:10950
Moderate: php:8.1 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) | CVSS3: 8.8 | 29% Средний | больше 2 лет назад |
| CVE-2024-5585 In PHP versions8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before ... | CVSS3: 8.8 | 29% Средний | больше 2 лет назад |
 | CVE-2024-5458 In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly. | CVSS3: 5.3 | 12% Средний | больше 2 лет назад |
 | CVE-2024-5458 In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly. | CVSS3: 5.3 | 12% Средний | около 4 лет назад |
 | CVE-2024-5458 In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly. | CVSS3: 5.3 | 12% Средний | больше 2 лет назад |
| CVE-2024-5458 Filter bypass in filter_var (FILTER_VALIDATE_URL) | CVSS3: 5.3 | 12% Средний | 9 месяцев назад |
| CVE-2024-5458 In PHP versions8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before ... | CVSS3: 5.3 | 12% Средний | больше 2 лет назад |
| GHSA-9fcc-425m-g385 bypass CVE-2024-1874 | CVSS3: 7.7 | 29% Средний | больше 2 лет назад |
 | BDU:2024-05512 Уязвимость функции proc_open() интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольные команды | CVSS3: 8.8 | 29% Средний | больше 2 лет назад |
 | SUSE-SU-2024:2039-1 Security update for php8 | 12% Средний | больше 2 лет назад | |
| SUSE-SU-2024:2038-1 Security update for php8 | 12% Средний | больше 2 лет назад | |
| SUSE-SU-2024:2027-1 Security update for php8 | 12% Средний | больше 2 лет назад | |
| GHSA-w8qr-v226-r27w Filter bypass in filter_var (FILTER_VALIDATE_URL) | CVSS3: 5.3 | 12% Средний | больше 2 лет назад |
| BDU:2024-04846 Уязвимость функции filter_var интерпретатора языка программирования PHP, позволяющая нарушителю подменить URL-адреса с ошибочными данными | CVSS3: 5.3 | 12% Средний | больше 2 лет назад |
 | ROS-20240820-16 Уязвимость php 8.3 | CVSS3: 5.3 | 12% Средний | около 2 лет назад |
| ROS-20240820-15 Уязвимость php 8.2 | CVSS3: 5.3 | 12% Средний | около 2 лет назад |
| ROS-20240820-08 Уязвимость php 8.1 | CVSS3: 5.3 | 12% Средний | около 2 лет назад |
| SUSE-SU-2024:2037-1 Security update for php7 | больше 2 лет назад | ||
 | RLSA-2024:10951 Moderate: php:8.2 security update | почти 2 года назад | ||
| RLSA-2024:10950 Moderate: php:8.1 security update | почти 2 года назад |
Уязвимостей на страницу