php-pear vulnerabilities (Red Hat)
204 vulnerabilities.
php-pearRed HatInteger overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows...5.0 Mediumphp-pearRed Hatexif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...4.3 Mediumphp-pearRed HatThe installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink...3.3 Lowphp-pearRed HatInteger overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it...6.8 Mediumphp-pearRed HatThe utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...6.8 Mediumphp-pearRed HatThe var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer...4.3 Mediumphp-pearRed HatThe default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly...5.0 Mediumphp-pearRed HatStack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...5.0 Mediumphp-pearRed HatThe Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected...6.4 Mediumphp-pearRed HatThe xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...5.0 Mediumphp-pearRed HatThe htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8...4.3 Mediumphp-pearRed HatPHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created...5.0 Mediumphp-pearRed HatThe _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics...9.3 Highphp-pearRed HatUnspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...7.5 Highphp-pearRed HatThe php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform...7.5 Highphp-pearRed HatThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...6.8 Mediumphp-pearRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8...6.5 Mediumphp-pearRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...4.0 Mediumphp-pearRed HatThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...5.0 Mediumphp-pearRed HatThe ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...2.6 Lowphp-pearRed HatThe exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to...4.3 Mediumphp-pearRed HatMultiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc...8.5 Highphp-pearRed HatPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify...2.1 Lowphp-pearRed HatArray index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent...5.0 Mediumphp-pearRed HatHeap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring...10.0 Highphp-pearRed HatCross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0...2.6 Lowphp-pearRed HatPHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote...5.0 Mediumphp-pearRed HatBuffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5...7.5 Highphp-pearRed HatCross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...4.3 Mediumphp-pearRed HatThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...5.0 Mediumphp-pearRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit...9.8 Criticalphp-pearRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit...7.5 Highphp-pearRed HatThe escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent...10.0 Highphp-pearRed HatCross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for...4.3 Mediumphp-pearRed HatThe output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...4.3 Mediumphp-pearRed HatThe (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial...6.4 Mediumphp-pearRed HatPHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application...5.0 Mediumphp-pearRed HatUnspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to...5.0 Mediumphp-pearRed HatThe money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i...7.5 Highphp-pearRed HatThe wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the...5.0 Mediumphp-pearRed HatMultiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial...6.8 Mediumphp-pearRed HatThe session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows...4.3 Mediumphp-pearRed HatMultiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4...6.8 Mediumphp-pearRed HatThe gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of...4.3 Mediumphp-pearRed HatCRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2...2.6 Lowphp-pearRed HatBuffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has...7.5 Highphp-pearRed HatMultiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD...6.8 Mediumphp-pearRed HatBuffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5,...7.5 Highphp-pearRed HatCRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5...7.8 Highphp-pearRed HatDouble free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent...6.8 Medium- Show moreLoading…