libphp vulnerabilities (Bitnami)
91 vulnerabilities.
libphpBitnamiFilter bypass in filter_var (FILTER_VALIDATE_URL)5.3 MediumlibphpBitnamiPHP function password_verify can erroneously return true when argument contains NUL6.5 MediumlibphpBitnami__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix6.5 MediumlibphpBitnamiCommand injection via array-ish $command parameter of proc_open()9.4 CriticallibphpBitnamiPHP mb_encode_mimeheader runs endlessly for some inputs7.5 HighlibphpBitnamiPHP is vulnerable to the Marvin Attack5.9 MediumlibphpBitnamiBuffer overflow and overread in phar_dir_read()9.4 CriticallibphpBitnamiSecurity issue with external entity loading in XML without enabling it8.6 HighlibphpBitnamiMissing error check and insufficient random bytes in HTTP Digest authentication for SOAP2.6 LowlibphpBitnamiPotential buffer overflow in php_cli_server_startup_workers6.2 MediumlibphpBitnamiArray overrun in common path resolve code7.5 HighlibphpBitnamiDoS vulnerability when parsing multipart request body7.5 HighlibphpBitnamipassword_verify() always returns true for some invalid hashes7.7 HighlibphpBitnamiPDO::quote() may return unquoted string9.1 CriticallibphpBitnamiOOB read due to insufficient input validation in imageloadfont()6.5 MediumlibphpBitnamiBuffer overflow in sponge queue functions9.8 CriticallibphpBitnami$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 MediumlibphpBitnamiphar wrapper can occur dos when using quine gzip file2.3 LowlibphpBitnamiHeap buffer overflow in finfo_buffer7.7 HighlibphpBitnamimysqlnd/pdo password buffer overflow7.5 HighlibphpBitnamiFreeing unallocated memory in php_pgsql_free_params()8.1 HighlibphpBitnamiUAF due to php_filter_float() failing8.2 HighlibphpBitnamiSpecial characters break path parsing in XML functions5.3 MediumlibphpBitnamiPHP-FPM memory access in root process leading to privilege escalation7.8 HighlibphpBitnamiZipArchive::extractTo may extract outside of destination dir5.3 MediumlibphpBitnamiIncorrect URL validation in FILTER_VALIDATE_URL4.3 MediumlibphpBitnamiMultiple vulnerabilities in Firebird client extension5.0 MediumlibphpBitnamiNull Dereference in SoapClient5.3 MediumlibphpBitnamiFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 MediumlibphpBitnamiPHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 MediumlibphpBitnamiWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 MediumlibphpBitnamiUse of freed hash key in the phar_parse_zipfile function4.8 MediumlibphpBitnamiOOB Read in urldecode()7.5 HighlibphpBitnamiget_headers() silently truncates after a null byte5.3 MediumlibphpBitnamimb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 HighlibphpBitnamiUse-of-uninitialized-value in exif6.5 MediumlibphpBitnamiFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 MediumlibphpBitnamiNull Pointer Dereference in PHP Session Upload Progress7.5 HighlibphpBitnamiheap-buffer-overflow in phar_extract_file6.5 MediumlibphpBitnamiglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 MediumlibphpBitnamiOOB read in php_strip_tags_ex6.5 Medium