Количество 33
Количество 33
BDU:2024-03215
Уязвимость функции password_verify() интерпретатора языка программирования PHP, позволяющая нарушителю обойти процесс аутентификации и получить несанкционированный доступ к веб-приложению
ROS-20240826-22
Уязвимость php
ROS-20240826-21
Уязвимость php
ROS-20240826-02
Уязвимость php
ALT-PU-2024-18408
ALT-PU-2024-18408: package `php8.2-soap` update to version 8.2.18-alt1
ALT-PU-2024-18310
ALT-PU-2024-18310: package `php8.1-soap` update to version 8.1.28-alt1
ALT-PU-2024-18045
ALT-PU-2024-18045: package `php8.1-soap` update to version 8.1.28-alt1
ALT-PU-2024-18035
ALT-PU-2024-18035: package `php8.2-soap` update to version 8.2.18-alt1
ALT-PU-2024-6566
ALT-PU-2024-6566: package `php8.1` update to version 8.1.28-alt1
ALT-PU-2024-6501
ALT-PU-2024-6501: package `php8.2` update to version 8.2.18-alt1
ALT-PU-2024-6496
ALT-PU-2024-6496: package `php8.1` update to version 8.1.28-alt1
ALT-PU-2024-6444
ALT-PU-2024-6444: package `php8.2` update to version 8.2.18-alt1
ALT-PU-2024-18156
ALT-PU-2024-18156: package `php8.3-soap` update to version 8.3.6-alt1
ALT-PU-2024-6442
ALT-PU-2024-6442: package `php8.3` update to version 8.3.6-alt1
CVE-2024-3096
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.
CVE-2024-3096
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.
CVE-2024-3096
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.
CVE-2024-3096
PHP function password_verify can erroneously return true when argument contains NUL
CVE-2024-3096
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before ...
GHSA-h746-cjrr-wfmr
password_verify can erroneously return true, opening ATO risk
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-03215 Уязвимость функции password_verify() интерпретатора языка программирования PHP, позволяющая нарушителю обойти процесс аутентификации и получить несанкционированный доступ к веб-приложению | CVSS3: 9.1 | 1% Низкий | больше 2 лет назад |
 | ROS-20240826-22 Уязвимость php | CVSS3: 9.1 | 1% Низкий | около 2 лет назад |
| ROS-20240826-21 Уязвимость php | CVSS3: 9.1 | 1% Низкий | около 2 лет назад |
| ROS-20240826-02 Уязвимость php | CVSS3: 9.1 | 1% Низкий | около 2 лет назад |
 | ALT-PU-2024-18408 ALT-PU-2024-18408: package `php8.2-soap` update to version 8.2.18-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-18310 ALT-PU-2024-18310: package `php8.1-soap` update to version 8.1.28-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-18045 ALT-PU-2024-18045: package `php8.1-soap` update to version 8.1.28-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-18035 ALT-PU-2024-18035: package `php8.2-soap` update to version 8.2.18-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-6566 ALT-PU-2024-6566: package `php8.1` update to version 8.1.28-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-6501 ALT-PU-2024-6501: package `php8.2` update to version 8.2.18-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-6496 ALT-PU-2024-6496: package `php8.1` update to version 8.1.28-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-6444 ALT-PU-2024-6444: package `php8.2` update to version 8.2.18-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-18156 ALT-PU-2024-18156: package `php8.3-soap` update to version 8.3.6-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-6442 ALT-PU-2024-6442: package `php8.3` update to version 8.3.6-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
 | CVE-2024-3096 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true. | CVSS3: 6.5 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-3096 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true. | CVSS3: 4.8 | 1% Низкий | больше 2 лет назад |
| CVE-2024-3096 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true. | CVSS3: 6.5 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-3096 PHP function password_verify can erroneously return true when argument contains NUL | CVSS3: 6.5 | 1% Низкий | 7 месяцев назад |
| CVE-2024-3096 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before ... | CVSS3: 6.5 | 1% Низкий | больше 2 лет назад |
| GHSA-h746-cjrr-wfmr password_verify can erroneously return true, opening ATO risk | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу