php vulnerabilities (Red Hat)
358 vulnerabilities.
phpRed HatPDO::quote() may return unquoted string9.1 CriticalphpRed HatOOB read due to insufficient input validation in imageloadfont()6.5 MediumphpRed HatBuffer overflow in sponge queue functions9.8 CriticalphpRed Hat$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 MediumphpRed Hatphar wrapper can occur dos when using quine gzip file2.3 LowphpRed Hatmysqlnd/pdo password buffer overflow7.5 HighphpRed HatFreeing unallocated memory in php_pgsql_free_params()8.1 HighphpRed HatUAF due to php_filter_float() failing8.2 HighphpRed HatSpecial characters break path parsing in XML functions5.3 MediumphpRed HatPHP-FPM memory access in root process leading to privilege escalation7.8 HighphpRed HatDirectory Traversal in Archive_Tar7.1 HighphpRed HatIncorrect URL validation in FILTER_VALIDATE_URL4.3 MediumphpRed HatNull Dereference in SoapClient5.3 MediumphpRed HatDirectory Traversal in Archive_Tar7.5 HighphpRed HatFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 MediumphpRed HatDeserialization of Untrusted Data in Archive_Tar7.8 HighphpRed HatMultiple vulnerabilities through filename manipulation in Archive_Tar7.8 HighphpRed HatPHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 MediumphpRed HatWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 MediumphpRed HatUse of freed hash key in the phar_parse_zipfile function4.8 MediumphpRed HatTemporary files are not cleaned after OOM when parsing HTTP request data5.3 MediumphpRed Hatget_headers() silently truncates after a null byte5.3 MediumphpRed Hatmb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 HighphpRed HatUse-of-uninitialized-value in exif6.5 MediumphpRed HatFiles added to tar with Phar::buildFromIterator have all-access permissions5.5 MediumphpRed HatNull Pointer Dereference in PHP Session Upload Progress7.5 HighphpRed HatAn out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...5.1 MediumphpRed HatThe default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...9.8 CriticalphpRed Hatglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 MediumphpRed HatOOB read in php_strip_tags_ex6.5 MediumphpRed HatUse-after-free in exif parsing under memory sanitizer4.8 MediumphpRed HatHeap-buffer-overflow READ in exif4.8 MediumphpRed HatDirectoryIterator class silently truncates after a null byte3.7 LowphpRed Hatmcollective has a default password set at install9.8 CriticalphpRed HatOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...7.5 HighphpRed HatAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 HighphpRed HatAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function...7.5 HighphpRed Hatopenshift-origin-node Improper Input Validation vulnerability5.5 MediumphpRed HatUnderflow in PHP-FPM can lead to RCE8.7 HighphpRed HatOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.7.5 HighphpRed Hatheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 MediumphpRed Hatheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 MediumphpRed HatA NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to...6.5 MediumphpRed HatA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...9.8 CriticalphpRed HatHeap buffer overflow in EXIF extension4.8 MediumphpRed HatOut-of-bounds read in iconv.c4.2 MediumphpRed HatHeap over-read in PHP EXIF extension4.8 MediumphpRed HatHeap over-read in PHP EXIF extension4.8 MediumphpRed HatHeap over-read in PHP EXIF extension4.8 MediumphpRed HatAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 High- Show moreLoading…