Поиск уязвимостей
Количество 31
Количество 31
BDU:2024-07326
Уязвимость функции верификации пароля языка программирования PHP, связанная с недостаточным вычислением хеша пароля, позволяющая нарушителю оказать воздействие на целостность данных
ROS-20241220-01
Уязвимость PHP
ALT-PU-2023-8834
ALT-PU-2023-8834: package `php8.2-soap` update to version 8.2.3-alt1
ALT-PU-2023-8753
ALT-PU-2023-8753: package `php8.1-soap` update to version 8.1.16-alt1
ALT-PU-2023-8654
ALT-PU-2023-8654: package `php8.0-soap` update to version 8.0.28-alt1
ALT-PU-2023-8544
ALT-PU-2023-8544: package `php8.1-soap` update to version 8.1.16-alt1
ALT-PU-2023-8536
ALT-PU-2023-8536: package `php8.0-soap` update to version 8.0.28-alt1
ALT-PU-2023-8445
ALT-PU-2023-8445: package `php8.2` update to version 8.2.3-alt1
ALT-PU-2023-1319
ALT-PU-2023-1319: package `php8.0` update to version 8.0.28-alt1
ALT-PU-2023-1284
ALT-PU-2023-1284: package `php8.1` update to version 8.1.16-alt1
ALT-PU-2023-1256
ALT-PU-2023-1256: package `php8.1` update to version 8.1.16-alt1
ALT-PU-2023-1251
ALT-PU-2023-1251: package `php8.0` update to version 8.0.28-alt1
ALT-PU-2023-1246
ALT-PU-2023-1246: package `php8.2` update to version 8.2.3-alt1
CVE-2023-0567
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
CVE-2023-0567
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
CVE-2023-0567
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
CVE-2023-0567
CVE-2023-0567
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3 ...
GHSA-7fj2-8x79-rjf4
BCrypt hashes erroneously validate if the salt is cut short by `$`
SUSE-SU-2023:0515-1
Security update for php74
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-07326 Уязвимость функции верификации пароля языка программирования PHP, связанная с недостаточным вычислением хеша пароля, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 6.2 | 1% Низкий | почти 4 года назад |
 | ROS-20241220-01 Уязвимость PHP | CVSS3: 6.2 | 1% Низкий | почти 2 года назад |
| ALT-PU-2023-8834 ALT-PU-2023-8834: package `php8.2-soap` update to version 8.2.3-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
| ALT-PU-2023-8753 ALT-PU-2023-8753: package `php8.1-soap` update to version 8.1.16-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
| ALT-PU-2023-8654 ALT-PU-2023-8654: package `php8.0-soap` update to version 8.0.28-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
| ALT-PU-2023-8544 ALT-PU-2023-8544: package `php8.1-soap` update to version 8.1.16-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
| ALT-PU-2023-8536 ALT-PU-2023-8536: package `php8.0-soap` update to version 8.0.28-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
| ALT-PU-2023-8445 ALT-PU-2023-8445: package `php8.2` update to version 8.2.3-alt1 | CVSS3: 8.1 | почти 2 года назад | |
| ALT-PU-2023-1319 ALT-PU-2023-1319: package `php8.0` update to version 8.0.28-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
| ALT-PU-2023-1284 ALT-PU-2023-1284: package `php8.1` update to version 8.1.16-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
| ALT-PU-2023-1256 ALT-PU-2023-1256: package `php8.1` update to version 8.1.16-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
| ALT-PU-2023-1251 ALT-PU-2023-1251: package `php8.0` update to version 8.0.28-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
| ALT-PU-2023-1246 ALT-PU-2023-1246: package `php8.2` update to version 8.2.3-alt1 | CVSS3: 8.1 | больше 3 лет назад | |
 | CVE-2023-0567 In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid. | CVSS3: 6.2 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-0567 In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid. | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-0567 In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid. | CVSS3: 6.2 | 1% Низкий | больше 3 лет назад |
 | CVSS3: 6.2 | 1% Низкий | больше 3 лет назад | |
| CVE-2023-0567 In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3 ... | CVSS3: 6.2 | 1% Низкий | больше 3 лет назад |
| GHSA-7fj2-8x79-rjf4 BCrypt hashes erroneously validate if the salt is cut short by `$` | 1% Низкий | больше 3 лет назад | |
 | SUSE-SU-2023:0515-1 Security update for php74 | больше 3 лет назад |
Уязвимостей на страницу