php vulnerabilities (Bitnami)
91 vulnerabilities.
phpBitnamiFilter bypass in filter_var (FILTER_VALIDATE_URL)5.3 MediumphpBitnamiPHP function password_verify can erroneously return true when argument contains NUL6.5 MediumphpBitnami__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix6.5 MediumphpBitnamiCommand injection via array-ish $command parameter of proc_open()9.4 CriticalphpBitnamiPHP mb_encode_mimeheader runs endlessly for some inputs7.5 HighphpBitnamiPHP is vulnerable to the Marvin Attack5.9 MediumphpBitnamiBuffer overflow and overread in phar_dir_read()9.4 CriticalphpBitnamiSecurity issue with external entity loading in XML without enabling it8.6 HighphpBitnamiMissing error check and insufficient random bytes in HTTP Digest authentication for SOAP2.6 LowphpBitnamiPotential buffer overflow in php_cli_server_startup_workers6.2 MediumphpBitnamiArray overrun in common path resolve code7.5 HighphpBitnamiDoS vulnerability when parsing multipart request body7.5 HighphpBitnamipassword_verify() always returns true for some invalid hashes7.7 HighphpBitnamiPDO::quote() may return unquoted string9.1 CriticalphpBitnamiOOB read due to insufficient input validation in imageloadfont()6.5 MediumphpBitnamiBuffer overflow in sponge queue functions9.8 CriticalphpBitnami$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 MediumphpBitnamiphar wrapper can occur dos when using quine gzip file2.3 LowphpBitnamiHeap buffer overflow in finfo_buffer7.7 HighphpBitnamimysqlnd/pdo password buffer overflow7.5 HighphpBitnamiFreeing unallocated memory in php_pgsql_free_params()8.1 HighphpBitnamiUAF due to php_filter_float() failing8.2 HighphpBitnamiSpecial characters break path parsing in XML functions5.3 MediumphpBitnamiPHP-FPM memory access in root process leading to privilege escalation7.8 HighphpBitnamiZipArchive::extractTo may extract outside of destination dir5.3 MediumphpBitnamiIncorrect URL validation in FILTER_VALIDATE_URL4.3 MediumphpBitnamiMultiple vulnerabilities in Firebird client extension5.0 MediumphpBitnamiNull Dereference in SoapClient5.3 MediumphpBitnamiFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 MediumphpBitnamiPHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 MediumphpBitnamiWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 MediumphpBitnamiUse of freed hash key in the phar_parse_zipfile function4.8 MediumphpBitnamiOOB Read in urldecode()7.5 HighphpBitnamiget_headers() silently truncates after a null byte5.3 MediumphpBitnamimb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 HighphpBitnamiUse-of-uninitialized-value in exif6.5 MediumphpBitnamiFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 MediumphpBitnamiNull Pointer Dereference in PHP Session Upload Progress7.5 HighphpBitnamiheap-buffer-overflow in phar_extract_file6.5 MediumphpBitnamiglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 MediumphpBitnamiOOB read in php_strip_tags_ex6.5 Medium