Поиск уязвимостей
Количество 27
Количество 27
BDU:2024-03785
Уязвимость интерпретатора языка программирования PHP, связанная с ошибочной обработкой файлов cookie, позволяющая нарушителю перехватить сеанс и получить несанкционированный доступ к защищаемой информации
ROS-20240816-15
Уязвимость php
ROS-20240816-10
Уязвимость php
ALT-PU-2024-6566
ALT-PU-2024-6566: package `php8.1` update to version 8.1.28-alt1
ALT-PU-2024-6501
ALT-PU-2024-6501: package `php8.2` update to version 8.2.18-alt1
ALT-PU-2024-6496
ALT-PU-2024-6496: package `php8.1` update to version 8.1.28-alt1
ALT-PU-2024-6444
ALT-PU-2024-6444: package `php8.2` update to version 8.2.18-alt1
ALT-PU-2024-6442
ALT-PU-2024-6442: package `php8.3` update to version 8.3.6-alt1
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
CVE-2024-2756
CVE-2024-2756
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisor ...
GHSA-wpj3-hf5j-x4v4
__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
SUSE-SU-2024:1446-1
Security update for php8
SUSE-SU-2024:1445-1
Security update for php74
SUSE-SU-2024:1444-1
Security update for php7
SUSE-SU-2024:2037-1
Security update for php7
RLSA-2024:10951
Moderate: php:8.2 security update
RLSA-2024:10950
Moderate: php:8.1 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-03785 Уязвимость интерпретатора языка программирования PHP, связанная с ошибочной обработкой файлов cookie, позволяющая нарушителю перехватить сеанс и получить несанкционированный доступ к защищаемой информации | CVSS3: 6.5 | 38% Средний | больше 2 лет назад |
 | ROS-20240816-15 Уязвимость php | CVSS3: 6.5 | 38% Средний | около 2 лет назад |
| ROS-20240816-10 Уязвимость php | CVSS3: 6.5 | 38% Средний | около 2 лет назад |
| ALT-PU-2024-6566 ALT-PU-2024-6566: package `php8.1` update to version 8.1.28-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-6501 ALT-PU-2024-6501: package `php8.2` update to version 8.2.18-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-6496 ALT-PU-2024-6496: package `php8.1` update to version 8.1.28-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-6444 ALT-PU-2024-6444: package `php8.2` update to version 8.2.18-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2024-6442 ALT-PU-2024-6442: package `php8.3` update to version 8.3.6-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
 | CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications. | CVSS3: 6.5 | 38% Средний | больше 2 лет назад |
 | CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications. | CVSS3: 6.5 | 38% Средний | больше 2 лет назад |
 | CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications. | CVSS3: 6.5 | 38% Средний | больше 2 лет назад |
 | CVSS3: 6.5 | 38% Средний | больше 2 лет назад | |
| CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisor ... | CVSS3: 6.5 | 38% Средний | больше 2 лет назад |
| GHSA-wpj3-hf5j-x4v4 __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix | 38% Средний | больше 2 лет назад | |
 | SUSE-SU-2024:1446-1 Security update for php8 | больше 2 лет назад | ||
| SUSE-SU-2024:1445-1 Security update for php74 | больше 2 лет назад | ||
| SUSE-SU-2024:1444-1 Security update for php7 | больше 2 лет назад | ||
| SUSE-SU-2024:2037-1 Security update for php7 | больше 2 лет назад | ||
 | RLSA-2024:10951 Moderate: php:8.2 security update | почти 2 года назад | ||
| RLSA-2024:10950 Moderate: php:8.1 security update | почти 2 года назад |
Уязвимостей на страницу