php-mbstring vulnerabilities (Red Hat)
352 vulnerabilities.
php-mbstringRed HatThe var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer...4.3 Mediumphp-mbstringRed HatThe default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly...5.0 Mediumphp-mbstringRed HatStack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...5.0 Mediumphp-mbstringRed HatThe Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected...6.4 Mediumphp-mbstringRed HatThe xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...5.0 Mediumphp-mbstringRed HatThe htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8...4.3 Mediumphp-mbstringRed HatPHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created...5.0 Mediumphp-mbstringRed HatThe _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics...9.3 Highphp-mbstringRed HatUnspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...7.5 Highphp-mbstringRed HatThe php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform...7.5 Highphp-mbstringRed HatThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...6.8 Mediumphp-mbstringRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8...6.5 Mediumphp-mbstringRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...4.0 Mediumphp-mbstringRed HatThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...5.0 Mediumphp-mbstringRed HatThe ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...2.6 Lowphp-mbstringRed HatThe exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to...4.3 Mediumphp-mbstringRed HatMultiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc...8.5 Highphp-mbstringRed HatArray index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...6.8 Mediumphp-mbstringRed HatMemory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl...5.0 Mediumphp-mbstringRed HatHeap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl...7.5 Highphp-mbstringRed HatThe JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote...5.0 Mediumphp-mbstringRed HatPostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to...4.0 Mediumphp-mbstringRed HatPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify...2.1 Lowphp-mbstringRed HatCross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors...2.6 Lowphp-mbstringRed HatArray index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent...5.0 Mediumphp-mbstringRed HatHeap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring...10.0 Highphp-mbstringRed HatDirectory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier...7.5 Highphp-mbstringRed HatCross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0...2.6 Lowphp-mbstringRed HatMySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE...4.6 Mediumphp-mbstringRed HatMySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' ...4.0 Mediumphp-mbstringRed HatPHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote...5.0 Mediumphp-mbstringRed HatBuffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5...7.5 Highphp-mbstringRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit...9.8 Criticalphp-mbstringRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit...7.5 Highphp-mbstringRed HatThe escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent...10.0 Highphp-mbstringRed HatThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...9.8 Criticalphp-mbstringRed HatMySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5...4.6 Mediumphp-mbstringRed HatThe output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...4.3 Mediumphp-mbstringRed HatThe (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial...6.4 Mediumphp-mbstringRed HatPHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application...5.0 Mediumphp-mbstringRed HatUnspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to...5.0 Mediumphp-mbstringRed HatThe chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer...7.5 Highphp-mbstringRed HatThe zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to...7.5 Highphp-mbstringRed HatThe money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i...7.5 Highphp-mbstringRed HatThe wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the...5.0 Mediumphp-mbstringRed HatMultiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial...6.8 Mediumphp-mbstringRed HatThe session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows...4.3 Mediumphp-mbstringRed HatMultiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4...6.8 Mediumphp-mbstringRed HatThe gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of...4.3 Mediumphp-mbstringRed HatBuffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and...5.1 Medium- Show moreLoading…