Поиск уязвимостей
Количество 45
Количество 45
BDU:2026-08591
Уязвимость функции urldecode() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260901-80-0008
Уязвимость php 8.5
ROS-20260901-80-0007
Уязвимость php 8.4
ROS-20260901-80-0006
Уязвимость php 8.3
ROS-20260901-80-0005
Уязвимость php
ROS-20260901-73-0006
Уязвимость php 8.4
ROS-20260901-73-0005
Уязвимость php 8.3
ROS-20260901-73-0004
Уязвимость php
ALT-PU-2024-18553
ALT-PU-2024-18553: package `php8.2-soap` update to version 8.2.22-alt1
ALT-PU-2024-11504
ALT-PU-2024-11504: package `php8.2` update to version 8.2.22-alt1
ALT-PU-2024-18037
ALT-PU-2024-18037: package `php8.2-soap` update to version 8.2.24-alt1
ALT-PU-2024-13711
ALT-PU-2024-13711: package `php8.2` update to version 8.2.24-alt1
ALT-PU-2026-8952
ALT-PU-2026-8952: package `php8.2` update to version 8.2.31-alt1
ALT-PU-2026-8353
ALT-PU-2026-8353: package `php8.3-soap` update to version 8.3.31-alt1
ALT-PU-2026-8045
ALT-PU-2026-8045: package `php8.3` update to version 8.3.31-alt1
ALT-PU-2026-8043
ALT-PU-2026-8043: package `php8.2` update to version 8.2.31-alt1
CVE-2026-7258
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service.
CVE-2026-7258
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service.
CVE-2026-7258
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service.
CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSD
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-08591 Уязвимость функции urldecode() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | ROS-20260901-80-0008 Уязвимость php 8.5 | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| ROS-20260901-80-0007 Уязвимость php 8.4 | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| ROS-20260901-80-0006 Уязвимость php 8.3 | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| ROS-20260901-80-0005 Уязвимость php | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| ROS-20260901-73-0006 Уязвимость php 8.4 | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| ROS-20260901-73-0005 Уязвимость php 8.3 | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| ROS-20260901-73-0004 Уязвимость php | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| ALT-PU-2024-18553 ALT-PU-2024-18553: package `php8.2-soap` update to version 8.2.22-alt1 | CVSS3: 7.5 | 0% Низкий | около 2 лет назад |
| ALT-PU-2024-11504 ALT-PU-2024-11504: package `php8.2` update to version 8.2.22-alt1 | CVSS3: 7.5 | 0% Низкий | около 2 лет назад |
| ALT-PU-2024-18037 ALT-PU-2024-18037: package `php8.2-soap` update to version 8.2.24-alt1 | CVSS3: 9.8 | около 2 лет назад | |
| ALT-PU-2024-13711 ALT-PU-2024-13711: package `php8.2` update to version 8.2.24-alt1 | CVSS3: 9.8 | около 2 лет назад | |
| ALT-PU-2026-8952 ALT-PU-2026-8952: package `php8.2` update to version 8.2.31-alt1 | CVSS3: 9.8 | 5 месяцев назад | |
| ALT-PU-2026-8353 ALT-PU-2026-8353: package `php8.3-soap` update to version 8.3.31-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-8045 ALT-PU-2026-8045: package `php8.3` update to version 8.3.31-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-8043 ALT-PU-2026-8043: package `php8.2` update to version 8.2.31-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
 | CVE-2026-7258 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service. | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-7258 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service. | CVSS3: 5.9 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-7258 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service. | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-7258 Out-of-bounds read in urldecode() on NetBSD | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу