php vulnerabilities (Red Hat)
358 vulnerabilities.
phpRed HatThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...4.3 MediumphpRed Hatext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote...6.8 MediumphpRed HatRuby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068...5.0 MediumphpRed HatRuby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent...5.0 MediumphpRed HatCross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in...4.3 MediumphpRed HatThe SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read...5.0 MediumphpRed Hatruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name2.1 LowphpRed HatActiveRecord vulnerable to modification of protected model attributes4.3 MediumphpRed HatActive Record allows bypassing of database-query restrictions6.4 MediumphpRed HatRuby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without...5.0 MediumphpRed HatThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0...5.0 MediumphpRed HatThe sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does...4.3 MediumphpRed Hatactionpack Cross-site Scripting vulnerability4.3 MediumphpRed Hatactivesupport Cross-site Scripting vulnerability4.3 MediumphpRed Hatactionpack Cross-site Scripting vulnerability4.3 MediumphpRed Hatactionpack Improper Authentication vulnerability5.0 MediumphpRed HatUnspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...10.0 HighphpRed Hatactiverecord vulnerable to SQL Injection7.5 HighphpRed Hatactionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request4.3 MediumphpRed HatActive Record vulnerable to SQL Injection via nested query parameters5.0 MediumphpRed HatAction Pack contains database-query restrictions bypass6.4 MediumphpRed HatInteger overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before...7.5 HighphpRed HatThe crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP,...4.3 MediumphpRed Hatsapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...5.0 MediumphpRed Hatsapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ...7.5 HighphpRed HatThe file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...5.8 MediumphpRed Hatfile before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a...4.3 MediumphpRed HatMemory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a...5.0 MediumphpRed HatPHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive...6.8 MediumphpRed HatThe php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to...7.5 HighphpRed HatPHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create...6.4 MediumphpRed HatThe tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service...5.0 MediumphpRed HatPHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow...5.0 MediumphpRed HatPHP before 5.3.9 computes hash values for form parameters without restricting the ability to...5.0 MediumphpRed HatInteger overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4...6.4 MediumphpRed Hatcrypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8...5.0 MediumphpRed HatThe rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...6.4 MediumphpRed HatStack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3...7.5 HighphpRed HatInteger signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context...4.3 MediumphpRed HatUnspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent...4.3 MediumphpRed HatMultiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers...4.3 MediumphpRed HatInteger overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows...5.0 MediumphpRed Hatexif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...4.3 MediumphpRed HatUse-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows...7.5 HighphpRed HatPHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...5.0 MediumphpRed Hatstrtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and...5.0 MediumphpRed HatInteger overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it...6.8 MediumphpRed HatThe utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...6.8 MediumphpRed HatThe ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3...4.3 MediumphpRed HatFormat string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows...6.8 Medium- Show moreLoading…