Количество 45
Количество 45
GHSA-m8rr-4c36-8gq4
Out-of-bounds read in urldecode()
CVE-2026-7258
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service.
CVE-2026-7258
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service.
CVE-2026-7258
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service.
CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSD
CVE-2026-7258
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ...
BDU:2026-08591
Уязвимость функции urldecode() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260901-80-0008
Уязвимость php 8.5
ROS-20260901-80-0007
Уязвимость php 8.4
ROS-20260901-80-0006
Уязвимость php 8.3
ROS-20260901-80-0005
Уязвимость php
ROS-20260901-73-0006
Уязвимость php 8.4
ROS-20260901-73-0005
Уязвимость php 8.3
ROS-20260901-73-0004
Уязвимость php
ALT-PU-2024-18553
ALT-PU-2024-18553: package `php8.2-soap` update to version 8.2.22-alt1
ALT-PU-2024-11504
ALT-PU-2024-11504: package `php8.2` update to version 8.2.22-alt1
RLSA-2026:22305
Important: php:8.2 security update
RLSA-2026:22143
Important: php:8.2 security update
RLSA-2026:22142
Important: php:8.3 security update
ELSA-2026-22305
ELSA-2026-22305: php:8.2 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-m8rr-4c36-8gq4 Out-of-bounds read in urldecode() | 0% Низкий | 6 месяцев назад | |
 | CVE-2026-7258 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service. | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-7258 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service. | CVSS3: 5.9 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-7258 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (like isxdigit()). On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can lead to accessing array with negative offset, which can trigger a denial of service. | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-7258 Out-of-bounds read in urldecode() on NetBSD | 0% Низкий | 6 месяцев назад | |
| CVE-2026-7258 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before ... | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-08591 Уязвимость функции urldecode() интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | ROS-20260901-80-0008 Уязвимость php 8.5 | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| ROS-20260901-80-0007 Уязвимость php 8.4 | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| ROS-20260901-80-0006 Уязвимость php 8.3 | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| ROS-20260901-80-0005 Уязвимость php | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| ROS-20260901-73-0006 Уязвимость php 8.4 | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| ROS-20260901-73-0005 Уязвимость php 8.3 | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| ROS-20260901-73-0004 Уязвимость php | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| ALT-PU-2024-18553 ALT-PU-2024-18553: package `php8.2-soap` update to version 8.2.22-alt1 | CVSS3: 7.5 | 0% Низкий | около 2 лет назад |
| ALT-PU-2024-11504 ALT-PU-2024-11504: package `php8.2` update to version 8.2.22-alt1 | CVSS3: 7.5 | 0% Низкий | около 2 лет назад |
 | RLSA-2026:22305 Important: php:8.2 security update | 5 месяцев назад | ||
| RLSA-2026:22143 Important: php:8.2 security update | 5 месяцев назад | ||
| RLSA-2026:22142 Important: php:8.3 security update | 5 месяцев назад | ||
| ELSA-2026-22305 ELSA-2026-22305: php:8.2 security update (IMPORTANT) | 5 месяцев назад |
Уязвимостей на страницу