php-common vulnerabilities (Red Hat)
280 vulnerabilities.
php-commonRed HatInteger signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context...4.3 Mediumphp-commonRed HatUnspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent...4.3 Mediumphp-commonRed HatMultiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers...4.3 Mediumphp-commonRed HatInteger overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows...5.0 Mediumphp-commonRed Hatexif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...4.3 Mediumphp-commonRed HatUse-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows...7.5 Highphp-commonRed HatPHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...5.0 Mediumphp-commonRed Hatstrtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and...5.0 Mediumphp-commonRed HatInteger overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it...6.8 Mediumphp-commonRed HatThe utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...6.8 Mediumphp-commonRed HatThe ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3...4.3 Mediumphp-commonRed HatFormat string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows...6.8 Mediumphp-commonRed HatThe var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer...4.3 Mediumphp-commonRed HatThe default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly...5.0 Mediumphp-commonRed HatStack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...5.0 Mediumphp-commonRed HatThe Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected...6.4 Mediumphp-commonRed HatThe xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...5.0 Mediumphp-commonRed HatThe htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8...4.3 Mediumphp-commonRed HatPHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created...5.0 Mediumphp-commonRed HatThe _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics...9.3 Highphp-commonRed HatUnspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...7.5 Highphp-commonRed HatThe php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform...7.5 Highphp-commonRed HatThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...6.8 Mediumphp-commonRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8...6.5 Mediumphp-commonRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...4.0 Mediumphp-commonRed HatThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...5.0 Mediumphp-commonRed HatThe ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...2.6 Lowphp-commonRed HatThe exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to...4.3 Mediumphp-commonRed HatMultiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc...8.5 Highphp-commonRed HatArray index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...6.8 Mediumphp-commonRed HatMemory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl...5.0 Mediumphp-commonRed HatHeap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl...7.5 Highphp-commonRed HatThe JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote...5.0 Mediumphp-commonRed HatPostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to...4.0 Mediumphp-commonRed HatPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify...2.1 Lowphp-commonRed HatCross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors...2.6 Lowphp-commonRed HatArray index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent...5.0 Mediumphp-commonRed HatHeap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring...10.0 Highphp-commonRed HatDirectory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier...7.5 Highphp-commonRed HatCross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0...2.6 Lowphp-commonRed HatMySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE...4.6 Mediumphp-commonRed HatMySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' ...4.0 Mediumphp-commonRed HatPHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote...5.0 Mediumphp-commonRed HatBuffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5...7.5 Highphp-commonRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit...9.8 Criticalphp-commonRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit...7.5 Highphp-commonRed HatThe escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent...10.0 Highphp-commonRed HatThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...9.8 Criticalphp-commonRed HatMySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5...4.6 Mediumphp-commonRed HatThe output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...4.3 Medium- Show moreLoading…