Количество 3 843
Количество 3 843
SUSE-SU-2022:0530-1
Security update for php74
SUSE-SU-2020:1661-2
Security update for php7
SUSE-SU-2020:1661-1
Security update for php7
SUSE-SU-2020:1545-1
Security update for php7
SUSE-SU-2018:0717-1
Security update for php5
SUSE-SU-2018:0646-1
Security update for php7
SUSE-SU-2018:0530-1
Security update for php5
SUSE-SU-2018:0260-1
Security update for gd
SUSE-SU-2018:0235-1
Security update for gd
SUSE-SU-2017:2518-1
Security update for php5
SUSE-SU-2017:1709-1
Security update for php53
SUSE-SU-2017:0899-1
Security update for php7
SUSE-SU-2017:0761-1
Security update for php5
RLSA-2022:6158
Moderate: php:7.4 security update
RLSA-2022:5468
Important: php:8.0 security update
RLSA-2022:5467
Important: php:7.4 security update
GHSA-xx7m-rfgv-w2gg
Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter.
GHSA-xwxp-2934-fp75
Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinfo.php.
GHSA-xvh2-crgv-94ww
Integer overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via a single character search string in conjunction with a long replacement string, which overflows a 32 bit length counter. NOTE: this is probably the same issue as CVE-2007-0906.6.
GHSA-xvcw-3rfr-7w27
The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2022:0530-1 Security update for php74 | 3% Низкий | больше 3 лет назад | |
| SUSE-SU-2020:1661-2 Security update for php7 | 9% Низкий | около 5 лет назад | |
| SUSE-SU-2020:1661-1 Security update for php7 | 9% Низкий | около 5 лет назад | |
| SUSE-SU-2020:1545-1 Security update for php7 | 9% Низкий | около 5 лет назад | |
| SUSE-SU-2018:0717-1 Security update for php5 | 80% Высокий | больше 7 лет назад | |
| SUSE-SU-2018:0646-1 Security update for php7 | 80% Высокий | больше 7 лет назад | |
| SUSE-SU-2018:0530-1 Security update for php5 | 0% Низкий | больше 7 лет назад | |
| SUSE-SU-2018:0260-1 Security update for gd | 6% Низкий | больше 7 лет назад | |
| SUSE-SU-2018:0235-1 Security update for gd | 6% Низкий | больше 7 лет назад | |
| SUSE-SU-2017:2518-1 Security update for php5 | 4% Низкий | почти 8 лет назад | |
| SUSE-SU-2017:1709-1 Security update for php53 | 0% Низкий | около 8 лет назад | |
| SUSE-SU-2017:0899-1 Security update for php7 | 1% Низкий | больше 8 лет назад | |
| SUSE-SU-2017:0761-1 Security update for php5 | 1% Низкий | больше 8 лет назад | |
 | RLSA-2022:6158 Moderate: php:7.4 security update | 0% Низкий | почти 3 года назад | |
| RLSA-2022:5468 Important: php:8.0 security update | 7% Низкий | около 3 лет назад | |
| RLSA-2022:5467 Important: php:7.4 security update | 7% Низкий | около 3 лет назад | |
| GHSA-xx7m-rfgv-w2gg Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter. | 31% Средний | больше 3 лет назад | |
| GHSA-xwxp-2934-fp75 Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinfo.php. | 3% Низкий | больше 3 лет назад | |
| GHSA-xvh2-crgv-94ww Integer overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via a single character search string in conjunction with a long replacement string, which overflows a 32 bit length counter. NOTE: this is probably the same issue as CVE-2007-0906.6. | 1% Низкий | больше 3 лет назад | |
| GHSA-xvcw-3rfr-7w27 The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function. | CVSS3: 9.1 | 4% Низкий | около 3 лет назад |
Уязвимостей на страницу