php5 vulnerabilities (Debian)
314 vulnerabilities.
php5DebianThe BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...5.0 Mediumphp5Debiansoftmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial...4.3 Mediumphp5Debiansoftmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers...5.0 Mediumphp5DebianFine Free file before 5.17 allows context-dependent attackers to cause a denial of service ...5.0 Mediumphp5DebianThe asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4...7.5 Highphp5DebianThe scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly...5.0 Mediumphp5DebianThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...4.3 Mediumphp5Debianext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote...6.8 Mediumphp5DebianThe SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read...4.3 Mediumphp5DebianThe SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read...5.0 Mediumphp5Debianext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship...7.5 Highphp5Debianpdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not...2.6 Lowphp5DebianUnspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...10.0 Highphp5DebianInteger overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before...7.5 Highphp5Debiansapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...7.5 Highphp5Debiansapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ...7.5 Highphp5DebianThe file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...5.8 Mediumphp5DebianThe PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature...5.0 Mediumphp5DebianPHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive...6.8 Mediumphp5DebianThe php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to...7.5 Highphp5DebianPHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create...6.4 Mediumphp5DebianThe tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service...5.0 Mediumphp5DebianPHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow...5.0 Mediumphp5DebianPHP before 5.3.9 computes hash values for form parameters without restricting the ability to...5.0 Mediumphp5DebianInteger overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4...6.4 Mediumphp5DebianPHP before 5.3.7 does not properly implement the error_log function, which allows context...5.0 Mediumphp5DebianPHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc...5.0 Mediumphp5Debiancrypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8...5.0 Mediumphp5DebianThe (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP...5.0 Mediumphp5DebianThe rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...6.4 Mediumphp5DebianStack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3...7.5 Highphp5DebianInteger signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context...4.3 Mediumphp5DebianThe Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of...4.3 Mediumphp5DebianUnspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent...4.3 Mediumphp5DebianMultiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers...4.3 Mediumphp5DebianUnspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in...5.0 Mediumphp5DebianInteger overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows...5.0 Mediumphp5DebianBuffer overflow in the strval function in PHP before 5.3.6, when the precision configuration...4.3 Mediumphp5Debianexif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...4.3 Mediumphp5DebianThe _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does...4.3 Mediumphp5DebianThe Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete...6.3 Mediumphp5DebianUse-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows...7.5 Highphp5DebianMultiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and...7.5 Highphp5DebianInteger overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to...7.5 Highphp5DebianThe installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink...3.3 Lowphp5DebianThe grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5...5.0 Mediumphp5DebianUse-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might...6.8 Mediumphp5DebianDouble free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c...5.0 Mediumphp5DebianThe utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...6.8 Mediumphp5DebianThe ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3...4.3 Medium- Show moreLoading…