Логотип exploitDog
bind:"BDU:2015-00376" OR bind:"CVE-2014-3515"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2015-00376" OR bind:"CVE-2014-3515"

Количество 13

Количество 13

fstec логотип

BDU:2015-00376

около 11 лет назад

Уязвимость программного обеспечения PHP, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

CVSS2: 7.5
EPSS: Средний
ubuntu логотип

CVE-2014-3515

почти 11 лет назад

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

CVSS2: 7.5
EPSS: Средний
redhat логотип

CVE-2014-3515

почти 11 лет назад

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

CVSS2: 5.1
EPSS: Средний
nvd логотип

CVE-2014-3515

почти 11 лет назад

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

CVSS2: 7.5
EPSS: Средний
debian логотип

CVE-2014-3515

почти 11 лет назад

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorre ...

CVSS2: 7.5
EPSS: Средний
github логотип

GHSA-x775-rjw6-fgf2

около 3 лет назад

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

EPSS: Средний
oracle-oval логотип

ELSA-2014-1013

почти 11 лет назад

ELSA-2014-1013: php security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2014-1012

почти 11 лет назад

ELSA-2014-1012: php53 and php security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:1265-1

больше 10 лет назад

Security update for php53

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:1018-1

больше 10 лет назад

Security update for php53

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:0436-1

больше 10 лет назад

Security update for php53

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:0370-1

больше 10 лет назад

Security update for php53

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:1638-1

почти 9 лет назад

Security update for php53

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2015-00376

Уязвимость программного обеспечения PHP, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

CVSS2: 7.5
61%
Средний
около 11 лет назад
ubuntu логотип
CVE-2014-3515

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

CVSS2: 7.5
61%
Средний
почти 11 лет назад
redhat логотип
CVE-2014-3515

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

CVSS2: 5.1
61%
Средний
почти 11 лет назад
nvd логотип
CVE-2014-3515

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

CVSS2: 7.5
61%
Средний
почти 11 лет назад
debian логотип
CVE-2014-3515

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorre ...

CVSS2: 7.5
61%
Средний
почти 11 лет назад
github логотип
GHSA-x775-rjw6-fgf2

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

61%
Средний
около 3 лет назад
oracle-oval логотип
ELSA-2014-1013

ELSA-2014-1013: php security update (MODERATE)

почти 11 лет назад
oracle-oval логотип
ELSA-2014-1012

ELSA-2014-1012: php53 and php security update (MODERATE)

почти 11 лет назад
suse-cvrf логотип
SUSE-SU-2015:1265-1

Security update for php53

больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:1018-1

Security update for php53

больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:0436-1

Security update for php53

больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:0370-1

Security update for php53

больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2016:1638-1

Security update for php53

почти 9 лет назад

Уязвимостей на страницу