php vulnerabilities (Red Hat)
358 vulnerabilities.
phpRed HatThe gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of...4.3 MediumphpRed HatBuffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and...5.1 MediumphpRed HatCRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2...2.6 LowphpRed HatBuffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has...7.5 HighphpRed HatMultiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD...6.8 MediumphpRed HatBuffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5,...7.5 HighphpRed HatCRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5...7.8 HighphpRed HatDouble free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent...6.8 MediumphpRed HatPHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context...6.8 MediumphpRed HatThe mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal...6.8 MediumphpRed HatThe php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before...5.0 MediumphpRed HatInteger overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute...6.8 MediumphpRed HatThe Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a...7.5 HighphpRed HatThe zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64...4.3 MediumphpRed HatUnspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global...10.0 HighphpRed HatMultiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute...7.5 HighphpRed HatThe WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not...5.0 MediumphpRed HatBuffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via...5.0 MediumphpRed HatMultiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and...7.5 HighphpRed HatBuffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and...7.5 HighphpRed HatBuffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted...7.5 HighphpRed HatInteger overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute...10.0 HighphpRed HatInteger overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit...2.6 LowphpRed HatThe stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out...10.0 HighphpRed HatBuffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in...2.6 LowphpRed HatMultiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext...9.3 HighphpRed Hatscanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to...4.6 MediumphpRed Hatzend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause...9.3 HighphpRed HatUnspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors,...9.3 HighphpRed HatInteger overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context...5.0 MediumphpRed HatDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass...2.6 LowphpRed HatCross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote...4.3 MediumphpRed HatPHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary...5.0 MediumphpRed HatMultiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors...2.6 LowphpRed HatCRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote...5.0 MediumphpRed HatThe exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to...5.0 MediumphpRed HatThe RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals...7.5 HighphpRed HatThe parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one...5.0 MediumphpRed HatCross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x...4.3 MediumphpRed HatBuffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server ...7.5 HighphpRed HatEval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in...7.5 HighphpRed HatEval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and...7.5 HighphpRed HatRace condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files...3.7 LowphpRed Hatexif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory...5.0 MediumphpRed HatInteger overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow...7.5 HighphpRed HatThe php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by...5.0 MediumphpRed HatThe php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by...5.0 MediumphpRed HatPHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read...5.0 MediumphpRed HatBuffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2...10.0 HighphpRed HatThe deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to...10.0 High- Show moreLoading…