php5 vulnerabilities (Debian)
314 vulnerabilities.
php5DebianStack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x...4.3 Mediumphp5DebianThe var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer...4.3 Mediumphp5DebianThe default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly...5.0 Mediumphp5DebianUse-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through...7.5 Highphp5DebianStack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...5.0 Mediumphp5DebianThe Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected...6.4 Mediumphp5DebianThe xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...5.0 Mediumphp5DebianPHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack...10.0 Highphp5DebianThe htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8...4.3 Mediumphp5DebianThe zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions...6.4 Mediumphp5DebianPHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created...5.0 Mediumphp5DebianUnspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...7.5 Highphp5DebianThe php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform...7.5 Highphp5DebianThe exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to...4.3 Mediumphp5DebianThe JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote...5.0 Mediumphp5DebianPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify...2.1 Lowphp5DebianThe php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context...5.0 Mediumphp5DebianThe dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a...6.4 Mediumphp5DebianCross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors...2.6 Lowphp5DebianHeap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring...10.0 Highphp5DebianDirectory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier...7.5 Highphp5DebianPHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for...7.5 Highphp5DebianPHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote...5.0 Mediumphp5DebianBuffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6...6.4 Mediumphp5DebianBuffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5...7.5 Highphp5Debianphp_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow...5.0 Mediumphp5DebianThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit...9.8 Criticalphp5DebianThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit...7.5 Highphp5DebianThe escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent...10.0 Highphp5DebianStack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown...10.0 Highphp5DebianThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...9.8 Criticalphp5DebianInteger overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of...5.0 Mediumphp5DebianThe output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...4.3 Mediumphp5DebianThe (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial...6.4 Mediumphp5DebianBuffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and...7.5 Highphp5DebianUnspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and...7.5 Highphp5DebianThe zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to...7.5 Highphp5DebianThe money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i...7.5 Highphp5DebianMultiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers...7.5 Highphp5DebianThe wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the...5.0 Mediumphp5DebianThe glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service...6.8 Mediumphp5DebianThe session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows...4.3 Mediumphp5DebianBuffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact...7.2 Highphp5DebianBuffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and...5.1 Mediumphp5DebianCRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2...2.6 Lowphp5DebianBuffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has...7.5 Highphp5DebianCRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5...5.0 Mediumphp5DebianInteger signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2...7.5 Highphp5DebianBuffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4...7.5 Highphp5DebianBuffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote...5.1 Medium- Show moreLoading…