php-min vulnerabilities (Bitnami)
91 vulnerabilities.
php-minBitnamiFilter bypass in filter_var (FILTER_VALIDATE_URL)5.3 Mediumphp-minBitnamiPHP function password_verify can erroneously return true when argument contains NUL6.5 Mediumphp-minBitnami__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix6.5 Mediumphp-minBitnamiCommand injection via array-ish $command parameter of proc_open()9.4 Criticalphp-minBitnamiPHP mb_encode_mimeheader runs endlessly for some inputs7.5 Highphp-minBitnamiPHP is vulnerable to the Marvin Attack5.9 Mediumphp-minBitnamiBuffer overflow and overread in phar_dir_read()9.4 Criticalphp-minBitnamiSecurity issue with external entity loading in XML without enabling it8.6 Highphp-minBitnamiMissing error check and insufficient random bytes in HTTP Digest authentication for SOAP2.6 Lowphp-minBitnamiPotential buffer overflow in php_cli_server_startup_workers6.2 Mediumphp-minBitnamiArray overrun in common path resolve code7.5 Highphp-minBitnamiDoS vulnerability when parsing multipart request body7.5 Highphp-minBitnamipassword_verify() always returns true for some invalid hashes7.7 Highphp-minBitnamiPDO::quote() may return unquoted string9.1 Criticalphp-minBitnamiOOB read due to insufficient input validation in imageloadfont()6.5 Mediumphp-minBitnamiBuffer overflow in sponge queue functions9.8 Criticalphp-minBitnami$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 Mediumphp-minBitnamiphar wrapper can occur dos when using quine gzip file2.3 Lowphp-minBitnamiHeap buffer overflow in finfo_buffer7.7 Highphp-minBitnamimysqlnd/pdo password buffer overflow7.5 Highphp-minBitnamiFreeing unallocated memory in php_pgsql_free_params()8.1 Highphp-minBitnamiUAF due to php_filter_float() failing8.2 Highphp-minBitnamiSpecial characters break path parsing in XML functions5.3 Mediumphp-minBitnamiPHP-FPM memory access in root process leading to privilege escalation7.8 Highphp-minBitnamiZipArchive::extractTo may extract outside of destination dir5.3 Mediumphp-minBitnamiIncorrect URL validation in FILTER_VALIDATE_URL4.3 Mediumphp-minBitnamiMultiple vulnerabilities in Firebird client extension5.0 Mediumphp-minBitnamiNull Dereference in SoapClient5.3 Mediumphp-minBitnamiFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 Mediumphp-minBitnamiPHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Mediumphp-minBitnamiWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Mediumphp-minBitnamiUse of freed hash key in the phar_parse_zipfile function4.8 Mediumphp-minBitnamiOOB Read in urldecode()7.5 Highphp-minBitnamiget_headers() silently truncates after a null byte5.3 Mediumphp-minBitnamimb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 Highphp-minBitnamiUse-of-uninitialized-value in exif6.5 Mediumphp-minBitnamiFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 Mediumphp-minBitnamiNull Pointer Dereference in PHP Session Upload Progress7.5 Highphp-minBitnamiheap-buffer-overflow in phar_extract_file6.5 Mediumphp-minBitnamiglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 Mediumphp-minBitnamiOOB read in php_strip_tags_ex6.5 Medium