Поиск уязвимостей
Количество 43
Количество 43
BDU:2026-09671
Уязвимость менеджера фоновых процессов PHP-FPM интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный JavaScript-код (XSS)
ROS-20260901-80-0020
Уязвимость php 8.5
ROS-20260901-80-0019
Уязвимость php 8.4
ROS-20260901-80-0018
Уязвимость php 8.3
ROS-20260901-80-0017
Уязвимость php
ROS-20260901-73-0015
Уязвимость php 8.4
ROS-20260901-73-0014
Уязвимость php 8.3
ROS-20260901-73-0013
Уязвимость php
ALT-PU-2026-9831
ALT-PU-2026-9831: package `php8.2-soap` update to version 8.2.31-alt1
ALT-PU-2026-8355
ALT-PU-2026-8355: package `php8.2-soap` update to version 8.2.31-alt1
ALT-PU-2026-8952
ALT-PU-2026-8952: package `php8.2` update to version 8.2.31-alt1
ALT-PU-2026-8353
ALT-PU-2026-8353: package `php8.3-soap` update to version 8.3.31-alt1
ALT-PU-2026-8045
ALT-PU-2026-8045: package `php8.3` update to version 8.3.31-alt1
ALT-PU-2026-8043
ALT-PU-2026-8043: package `php8.2` update to version 8.2.31-alt1
CVE-2026-6735
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page.
CVE-2026-6735
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page.
CVE-2026-6735
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page.
CVE-2026-6735
XSS within PHP-FPM status endpoint
CVE-2026-6735
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...
ALT-PU-2026-8354
ALT-PU-2026-8354: package `php8.4-soap` update to version 8.4.21-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-09671 Уязвимость менеджера фоновых процессов PHP-FPM интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный JavaScript-код (XSS) | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | ROS-20260901-80-0020 Уязвимость php 8.5 | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| ROS-20260901-80-0019 Уязвимость php 8.4 | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| ROS-20260901-80-0018 Уязвимость php 8.3 | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| ROS-20260901-80-0017 Уязвимость php | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| ROS-20260901-73-0015 Уязвимость php 8.4 | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| ROS-20260901-73-0014 Уязвимость php 8.3 | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| ROS-20260901-73-0013 Уязвимость php | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| ALT-PU-2026-9831 ALT-PU-2026-9831: package `php8.2-soap` update to version 8.2.31-alt1 | CVSS3: 9.8 | 5 месяцев назад | |
| ALT-PU-2026-8355 ALT-PU-2026-8355: package `php8.2-soap` update to version 8.2.31-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-8952 ALT-PU-2026-8952: package `php8.2` update to version 8.2.31-alt1 | CVSS3: 9.8 | 5 месяцев назад | |
| ALT-PU-2026-8353 ALT-PU-2026-8353: package `php8.3-soap` update to version 8.3.31-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-8045 ALT-PU-2026-8045: package `php8.3` update to version 8.3.31-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-8043 ALT-PU-2026-8043: package `php8.2` update to version 8.2.31-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
 | CVE-2026-6735 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6735 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6735 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6735 XSS within PHP-FPM status endpoint | 0% Низкий | 6 месяцев назад | |
| CVE-2026-6735 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ... | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| ALT-PU-2026-8354 ALT-PU-2026-8354: package `php8.4-soap` update to version 8.4.21-alt1 | CVSS3: 9.8 | 6 месяцев назад |
Уязвимостей на страницу