php-debuginfo vulnerabilities (Red Hat)
354 vulnerabilities.
php-debuginfoRed Hatactionpack Cross-site Scripting vulnerability4.3 Mediumphp-debuginfoRed Hatactivesupport Cross-site Scripting vulnerability4.3 Mediumphp-debuginfoRed Hatactionpack Cross-site Scripting vulnerability4.3 Mediumphp-debuginfoRed Hatactionpack Improper Authentication vulnerability5.0 Mediumphp-debuginfoRed HatUnspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...10.0 Highphp-debuginfoRed Hatactiverecord vulnerable to SQL Injection7.5 Highphp-debuginfoRed Hatactionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request4.3 Mediumphp-debuginfoRed HatActive Record vulnerable to SQL Injection via nested query parameters5.0 Mediumphp-debuginfoRed HatAction Pack contains database-query restrictions bypass6.4 Mediumphp-debuginfoRed HatInteger overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before...7.5 Highphp-debuginfoRed HatThe crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP,...4.3 Mediumphp-debuginfoRed Hatsapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...5.0 Mediumphp-debuginfoRed Hatsapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ...7.5 Highphp-debuginfoRed HatThe file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...5.8 Mediumphp-debuginfoRed Hatfile before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a...4.3 Mediumphp-debuginfoRed HatMemory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a...5.0 Mediumphp-debuginfoRed HatPHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive...6.8 Mediumphp-debuginfoRed HatThe php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to...7.5 Highphp-debuginfoRed HatPHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create...6.4 Mediumphp-debuginfoRed HatThe tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service...5.0 Mediumphp-debuginfoRed HatPHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow...5.0 Mediumphp-debuginfoRed HatPHP before 5.3.9 computes hash values for form parameters without restricting the ability to...5.0 Mediumphp-debuginfoRed HatInteger overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4...6.4 Mediumphp-debuginfoRed Hatcrypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8...5.0 Mediumphp-debuginfoRed HatThe rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...6.4 Mediumphp-debuginfoRed HatStack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3...7.5 Highphp-debuginfoRed HatInteger signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context...4.3 Mediumphp-debuginfoRed HatUnspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent...4.3 Mediumphp-debuginfoRed HatMultiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers...4.3 Mediumphp-debuginfoRed HatInteger overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows...5.0 Mediumphp-debuginfoRed Hatexif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...4.3 Mediumphp-debuginfoRed HatUse-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows...7.5 Highphp-debuginfoRed HatPHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...5.0 Mediumphp-debuginfoRed Hatstrtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and...5.0 Mediumphp-debuginfoRed HatInteger overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it...6.8 Mediumphp-debuginfoRed HatThe utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...6.8 Mediumphp-debuginfoRed HatThe ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3...4.3 Mediumphp-debuginfoRed HatFormat string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows...6.8 Mediumphp-debuginfoRed HatThe var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer...4.3 Mediumphp-debuginfoRed HatThe default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly...5.0 Mediumphp-debuginfoRed HatStack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...5.0 Mediumphp-debuginfoRed HatThe Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected...6.4 Mediumphp-debuginfoRed HatThe xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...5.0 Mediumphp-debuginfoRed HatThe htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8...4.3 Mediumphp-debuginfoRed HatPHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created...5.0 Mediumphp-debuginfoRed HatThe _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics...9.3 Highphp-debuginfoRed HatUnspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...7.5 Highphp-debuginfoRed HatThe php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform...7.5 Highphp-debuginfoRed HatThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...6.8 Mediumphp-debuginfoRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8...6.5 Medium- Show moreLoading…