php vulnerabilities (Red Hat)
358 vulnerabilities.
phpRed HatThe var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer...4.3 MediumphpRed HatThe default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly...5.0 MediumphpRed HatStack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...5.0 MediumphpRed HatThe Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected...6.4 MediumphpRed HatThe xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...5.0 MediumphpRed HatThe htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8...4.3 MediumphpRed HatPHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created...5.0 MediumphpRed HatThe _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics...9.3 HighphpRed HatUnspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...7.5 HighphpRed HatThe php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform...7.5 HighphpRed HatThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...6.8 MediumphpRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8...6.5 MediumphpRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...4.0 MediumphpRed HatThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...5.0 MediumphpRed HatThe ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...2.6 LowphpRed HatThe exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to...4.3 MediumphpRed HatMultiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc...8.5 HighphpRed HatArray index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...6.8 MediumphpRed HatMemory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl...5.0 MediumphpRed HatHeap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl...7.5 HighphpRed HatThe JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote...5.0 MediumphpRed HatPostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to...4.0 MediumphpRed HatPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify...2.1 LowphpRed HatCross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors...2.6 LowphpRed HatArray index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent...5.0 MediumphpRed HatHeap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring...10.0 HighphpRed HatDirectory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier...7.5 HighphpRed HatCross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0...2.6 LowphpRed HatMySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE...4.6 MediumphpRed HatMySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' ...4.0 MediumphpRed HatPHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote...5.0 MediumphpRed HatBuffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5...7.5 HighphpRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit...9.8 CriticalphpRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit...7.5 HighphpRed HatThe escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent...10.0 HighphpRed HatThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...9.8 CriticalphpRed HatMySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5...4.6 MediumphpRed HatThe output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...4.3 MediumphpRed HatThe (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial...6.4 MediumphpRed HatInteger overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow...6.8 MediumphpRed HatPerl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes...6.8 MediumphpRed HatPHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application...5.0 MediumphpRed HatUnspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to...5.0 MediumphpRed HatThe chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer...7.5 HighphpRed HatThe zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to...7.5 HighphpRed HatThe money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i...7.5 HighphpRed HatThe wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the...5.0 MediumphpRed HatMultiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial...6.8 MediumphpRed HatThe session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows...4.3 MediumphpRed HatMultiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4...6.8 Medium- Show moreLoading…