Логотип exploitDog
product: "php"
Консоль
Логотип exploitDog

exploitDog

product: "php"

Количество 3 889

Количество 3 889

ubuntu логотип

CVE-2020-7067

почти 6 лет назад

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2020-7067

почти 6 лет назад

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

CVSS3: 5.9
EPSS: Низкий
nvd логотип

CVE-2020-7067

почти 6 лет назад

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2020-7067

почти 6 лет назад

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2020-7060

около 6 лет назад

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2020-7060

около 6 лет назад

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2020-7060

около 6 лет назад

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2020-7060

около 6 лет назад

When using certain mbstring functions to convert multibyte encodings, ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2020-7059

около 6 лет назад

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2020-7059

около 6 лет назад

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2020-7059

около 6 лет назад

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2020-7059

около 6 лет назад

When using fgetss() function to read data with stripping tags, in PHP ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2019-9640

около 7 лет назад

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.

CVSS3: 7.5
EPSS: Средний
redhat логотип

CVE-2019-9640

около 7 лет назад

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.

CVSS3: 5.3
EPSS: Средний
nvd логотип

CVE-2019-9640

около 7 лет назад

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.

CVSS3: 7.5
EPSS: Средний
debian логотип

CVE-2019-9640

около 7 лет назад

An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ...

CVSS3: 7.5
EPSS: Средний
ubuntu логотип

CVE-2019-9639

около 7 лет назад

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.

CVSS3: 7.5
EPSS: Средний
redhat логотип

CVE-2019-9639

около 7 лет назад

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.

CVSS3: 5.3
EPSS: Средний
nvd логотип

CVE-2019-9639

около 7 лет назад

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.

CVSS3: 7.5
EPSS: Средний
debian логотип

CVE-2019-9639

около 7 лет назад

An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ...

CVSS3: 7.5
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

CVSS3: 7.5
10%
Низкий
почти 6 лет назад
redhat логотип
CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

CVSS3: 5.9
10%
Низкий
почти 6 лет назад
nvd логотип
CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

CVSS3: 7.5
10%
Низкий
почти 6 лет назад
debian логотип
CVE-2020-7067

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below ...

CVSS3: 7.5
10%
Низкий
почти 6 лет назад
ubuntu логотип
CVE-2020-7060

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
6%
Низкий
около 6 лет назад
redhat логотип
CVE-2020-7060

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
6%
Низкий
около 6 лет назад
nvd логотип
CVE-2020-7060

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
6%
Низкий
около 6 лет назад
debian логотип
CVE-2020-7060

When using certain mbstring functions to convert multibyte encodings, ...

CVSS3: 6.5
6%
Низкий
около 6 лет назад
ubuntu логотип
CVE-2020-7059

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
2%
Низкий
около 6 лет назад
redhat логотип
CVE-2020-7059

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
2%
Низкий
около 6 лет назад
nvd логотип
CVE-2020-7059

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

CVSS3: 6.5
2%
Низкий
около 6 лет назад
debian логотип
CVE-2020-7059

When using fgetss() function to read data with stripping tags, in PHP ...

CVSS3: 6.5
2%
Низкий
около 6 лет назад
ubuntu логотип
CVE-2019-9640

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.

CVSS3: 7.5
16%
Средний
около 7 лет назад
redhat логотип
CVE-2019-9640

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.

CVSS3: 5.3
16%
Средний
около 7 лет назад
nvd логотип
CVE-2019-9640

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.

CVSS3: 7.5
16%
Средний
около 7 лет назад
debian логотип
CVE-2019-9640

An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ...

CVSS3: 7.5
16%
Средний
около 7 лет назад
ubuntu логотип
CVE-2019-9639

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.

CVSS3: 7.5
15%
Средний
около 7 лет назад
redhat логотип
CVE-2019-9639

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.

CVSS3: 5.3
15%
Средний
около 7 лет назад
nvd логотип
CVE-2019-9639

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.

CVSS3: 7.5
15%
Средний
около 7 лет назад
debian логотип
CVE-2019-9639

An issue was discovered in the EXIF component in PHP before 7.1.27, 7. ...

CVSS3: 7.5
15%
Средний
около 7 лет назад

Уязвимостей на страницу