php-debuginfo vulnerabilities (Red Hat)
354 vulnerabilities.
php-debuginfoRed HatThe GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka...6.5 Mediumphp-debuginfoRed HatThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Criticalphp-debuginfoRed HatInteger overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote...7.8 Highphp-debuginfoRed HatThe gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2...5.5 Mediumphp-debuginfoRed HatThe bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7...7.8 Highphp-debuginfoRed HatHTTP Proxy header vulnerability8.1 Highphp-debuginfoRed HatInteger overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd)...8.8 Highphp-debuginfoRed HatDouble free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the...9.8 Criticalphp-debuginfoRed HatInteger overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd)...8.8 Highphp-debuginfoRed HatJenkins does not Verify Checksums for Plugin Files7.5 Highphp-debuginfoRed HatJenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack8.8 Highphp-debuginfoRed HatJenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack8.8 Highphp-debuginfoRed HatImproper Input Validation in Apache ActiveMQ9.8 Criticalphp-debuginfoRed HatJenkins CLI Deserialization of Untrusted Data vulnerability9.8 Criticalphp-debuginfoRed HatJenkins allows Cross-Site Scripting (XSS)4.3 Mediumphp-debuginfoRed HatJenkins allows Bypass of Access Restrictions7.5 Highphp-debuginfoRed HatJenkins allows Unauthorized Viewing of Queue API Information5.0 Mediumphp-debuginfoRed HatJenkins allows Administrators to Access API Tokens6.5 Mediumphp-debuginfoRed HatJenkins has Local File Inclusion Vulnerability5.0 Mediumphp-debuginfoRed HatJenkins has Information Disclosure via Sidepanel Widget5.0 Mediumphp-debuginfoRed HatJenkins allows Exposure of Sensitive Information to an Unauthorized Actor5.0 Mediumphp-debuginfoRed HatJenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI5.0 Mediumphp-debuginfoRed HatJenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack6.8 Mediumphp-debuginfoRed HatJenkins discloses project names via fingerprints5.0 Mediumphp-debuginfoRed HatThe mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5...7.5 Highphp-debuginfoRed HatThe mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4...7.5 Highphp-debuginfoRed HatThe SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5...7.5 Highphp-debuginfoRed HatThe phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24,...7.5 Highphp-debuginfoRed HatPHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon...7.5 Highphp-debuginfoRed HatThe php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before...6.8 Mediumphp-debuginfoRed HatThe move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5...5.0 Mediumphp-debuginfoRed HatMultiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before...7.5 Highphp-debuginfoRed HatDouble free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the...7.5 Highphp-debuginfoRed HatStack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in...7.5 Highphp-debuginfoRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 Highphp-debuginfoRed HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...2.1 Lowphp-debuginfoRed HatInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before...9.8 Criticalphp-debuginfoRed HatThe exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x...9.8 Criticalphp-debuginfoRed HatThe __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5...9.8 Criticalphp-debuginfoRed HatPHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or...9.8 Criticalphp-debuginfoRed HatThe SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8...9.8 Criticalphp-debuginfoRed HatThe SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,...9.8 Criticalphp-debuginfoRed HatPHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...6.5 Mediumphp-debuginfoRed HatThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...5.0 Mediumphp-debuginfoRed HatThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...7.5 Highphp-debuginfoRed HatAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...5.0 Mediumphp-debuginfoRed HatInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...7.5 Highphp-debuginfoRed HatThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...5.0 Mediumphp-debuginfoRed HatPHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...5.3 Mediumphp-debuginfoRed HatPHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...6.5 Medium- Show moreLoading…