Логотип exploitDog
bind:"BDU:2022-02394" OR bind:"CVE-2021-21707"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2022-02394" OR bind:"CVE-2021-21707"

Количество 21

Количество 21

fstec логотип

BDU:2022-02394

больше 3 лет назад

Уязвимость функции simplexml_load_file() интерпретатора PHP , позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2021-21707

больше 3 лет назад

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.

CVSS3: 5.3
EPSS: Низкий
redhat логотип

CVE-2021-21707

больше 3 лет назад

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2021-21707

больше 3 лет назад

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2021-21707

больше 3 лет назад

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below ...

CVSS3: 5.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3927-1

больше 3 лет назад

Security update for php74

EPSS: Низкий
github логотип

GHSA-qh78-qfw9-93x9

больше 3 лет назад

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.

CVSS3: 5.3
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:3943-1

больше 3 лет назад

Recommended update for php7

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1570-1

больше 3 лет назад

Recommended update for php7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3943-1

больше 3 лет назад

Recommended update for php7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2303-1

почти 3 года назад

Security update for php8

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2292-1

почти 3 года назад

Security update for php7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0577-1

больше 3 лет назад

Security update for php72

EPSS: Низкий
rocky логотип

RLSA-2022:7628

больше 2 лет назад

Moderate: php:7.4 security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2022-7628

больше 2 лет назад

ELSA-2022-7628: php:7.4 security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0679-1

больше 3 лет назад

Security update for php7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0679-1

больше 3 лет назад

Security update for php7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:3997-1

больше 2 лет назад

Security update for php7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4069-1

больше 2 лет назад

Security update for php7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4068-1

больше 2 лет назад

Security update for php74

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2022-02394

Уязвимость функции simplexml_load_file() интерпретатора PHP , позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 5.3
1%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.

CVSS3: 5.3
1%
Низкий
больше 3 лет назад
redhat логотип
CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.

CVSS3: 5.3
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.

CVSS3: 5.3
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below ...

CVSS3: 5.3
1%
Низкий
больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3927-1

Security update for php74

1%
Низкий
больше 3 лет назад
github логотип
GHSA-qh78-qfw9-93x9

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.

CVSS3: 5.3
1%
Низкий
больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2021:3943-1

Recommended update for php7

больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2021:1570-1

Recommended update for php7

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3943-1

Recommended update for php7

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2303-1

Security update for php8

почти 3 года назад
suse-cvrf логотип
SUSE-SU-2022:2292-1

Security update for php7

почти 3 года назад
suse-cvrf логотип
SUSE-SU-2022:0577-1

Security update for php72

больше 3 лет назад
rocky логотип
RLSA-2022:7628

Moderate: php:7.4 security, bug fix, and enhancement update

больше 2 лет назад
oracle-oval логотип
ELSA-2022-7628

ELSA-2022-7628: php:7.4 security, bug fix, and enhancement update (MODERATE)

больше 2 лет назад
suse-cvrf логотип
openSUSE-SU-2022:0679-1

Security update for php7

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0679-1

Security update for php7

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:3997-1

Security update for php7

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4069-1

Security update for php7

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4068-1

Security update for php74

больше 2 лет назад

Уязвимостей на страницу