Поиск уязвимостей
Количество 44
Количество 44
ALT-PU-2026-12842
ALT-PU-2026-12842: package `php8.4-soap` update to version 8.4.24-alt1
ALT-PU-2026-12287
ALT-PU-2026-12287: package `php8.4` update to version 8.4.24-alt1
ALT-PU-2026-12285
ALT-PU-2026-12285: package `php8.5` update to version 8.5.9-alt1
openSUSE-SU-2026:21532-1
Security update for php8
SUSE-SU-2026:3514-1
Security update for php8
CVE-2026-7260
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
CVE-2026-7260
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
CVE-2026-7260
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
CVE-2026-7260
Stack overflow in phar with circular symlinks
CVE-2026-7260
Circular symbolic links in phar archives could lead to unbounded recur ...
CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
CVE-2026-17543
SQL injection in ext-pgsql via E'...' backslash breakout
CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would ...
ALT-PU-2026-20201
ALT-PU-2026-20201: package `php8.3-soap` update to version 8.3.36-alt1
ALT-PU-2026-20200
ALT-PU-2026-20200: package `php8.2-soap` update to version 8.2.35-alt1
ALT-PU-2026-19968
ALT-PU-2026-19968: package `php8.3` update to version 8.3.36-alt1
ALT-PU-2026-19956
ALT-PU-2026-19956: package `php8.2` update to version 8.2.35-alt1
SUSE-SU-2026:4128-1
Security update for php7
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-12842 ALT-PU-2026-12842: package `php8.4-soap` update to version 8.4.24-alt1 | CVSS3: 9.8 | 3 месяца назад | |
| ALT-PU-2026-12287 ALT-PU-2026-12287: package `php8.4` update to version 8.4.24-alt1 | CVSS3: 9.8 | 3 месяца назад | |
| ALT-PU-2026-12285 ALT-PU-2026-12285: package `php8.5` update to version 8.5.9-alt1 | CVSS3: 9.8 | 3 месяца назад | |
 | openSUSE-SU-2026:21532-1 Security update for php8 | 3 месяца назад | ||
| SUSE-SU-2026:3514-1 Security update for php8 | 3 месяца назад | ||
 | CVE-2026-7260 Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. | CVSS3: 5.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-7260 Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. | CVSS3: 5.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-7260 Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. | CVSS3: 5.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-7260 Stack overflow in phar with circular symlinks | CVSS3: 5.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-7260 Circular symbolic links in phar archives could lead to unbounded recur ... | CVSS3: 5.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. | CVSS3: 7.4 | 0% Низкий | 3 месяца назад |
| CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-17543 SQL injection in ext-pgsql via E'...' backslash breakout | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would ... | CVSS3: 9.8 | 0% Низкий | 3 месяца назад |
| ALT-PU-2026-20201 ALT-PU-2026-20201: package `php8.3-soap` update to version 8.3.36-alt1 | CVSS3: 9.8 | 14 дней назад | |
| ALT-PU-2026-20200 ALT-PU-2026-20200: package `php8.2-soap` update to version 8.2.35-alt1 | CVSS3: 9.8 | 14 дней назад | |
| ALT-PU-2026-19968 ALT-PU-2026-19968: package `php8.3` update to version 8.3.36-alt1 | CVSS3: 9.8 | 14 дней назад | |
| ALT-PU-2026-19956 ALT-PU-2026-19956: package `php8.2` update to version 8.2.35-alt1 | CVSS3: 9.8 | 14 дней назад | |
| SUSE-SU-2026:4128-1 Security update for php7 | 0% Низкий | около 2 месяцев назад |
Уязвимостей на страницу