php-dba vulnerabilities (TuxCare)
176 vulnerabilities.
php-dbaTuxCarepassword_verify() always returns true for some invalid hashes7.7 Highphp-dbaTuxCarePDO::quote() may return unquoted string9.1 Criticalphp-dbaTuxCareOOB read due to insufficient input validation in imageloadfont()6.5 Mediumphp-dbaTuxCareBuffer overflow in sponge queue functions9.8 Criticalphp-dbaTuxCare$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 Mediumphp-dbaTuxCarephar wrapper can occur dos when using quine gzip file2.3 Lowphp-dbaTuxCaremysqlnd/pdo password buffer overflow7.5 Highphp-dbaTuxCareFreeing unallocated memory in php_pgsql_free_params()8.1 Highphp-dbaTuxCareUpdate of php 5.3: Remove mariadb102 patch to eliminate faulty functionalityNo scorephp-dbaTuxCareUpdate of php 5.3: Fix segfault during graceful Apache restartNo scorephp-dbaTuxCareUAF due to php_filter_float() failing8.2 Highphp-dbaTuxCareSpecial characters break path parsing in XML functions5.3 Mediumphp-dbaTuxCarePHP-FPM memory access in root process leading to privilege escalation7.8 Highphp-dbaTuxCareIncorrect URL validation in FILTER_VALIDATE_URL4.3 Mediumphp-dbaTuxCareMultiple vulnerabilities in Firebird client extension5.0 Mediumphp-dbaTuxCareNull Dereference in SoapClient5.3 Mediumphp-dbaTuxCareFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 Mediumphp-dbaTuxCarePHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Mediumphp-dbaTuxCareWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Mediumphp-dbaTuxCareUse of freed hash key in the phar_parse_zipfile function4.8 Mediumphp-dbaTuxCareTemporary files are not cleaned after OOM when parsing HTTP request data5.3 Mediumphp-dbaTuxCareOOB Read in urldecode()7.5 Highphp-dbaTuxCareOOB read in php_strip_tags_ex6.5 Mediumphp-dbaTuxCareUse-after-free in exif parsing under memory sanitizer4.8 Mediumphp-dbaTuxCareHeap-buffer-overflow READ in exif4.8 Mediumphp-dbaTuxCareBuffer underflow in bc_shift_addsub3.7 Lowphp-dbaTuxCareDirectoryIterator class silently truncates after a null byte3.7 Lowphp-dbaTuxCareOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...7.5 Highphp-dbaTuxCareAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 Highphp-dbaTuxCareheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 Mediumphp-dbaTuxCareheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 Mediumphp-dbaTuxCareA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...9.8 Criticalphp-dbaTuxCareHeap buffer overflow in EXIF extension4.8 Mediumphp-dbaTuxCareHeap over-read in PHP EXIF extension4.8 Mediumphp-dbaTuxCareHeap over-read in PHP EXIF extension4.8 Mediumphp-dbaTuxCareHeap over-read in PHP EXIF extension4.8 Mediumphp-dbaTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...9.8 Criticalphp-dbaTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-dbaTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-dbaTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 Highphp-dbaTuxCareAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...7.5 Highphp-dbaTuxCareAn issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2....7.5 Highphp-dbaTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...7.5 Highphp-dbaTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp-dbaTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp-dbaTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Criticalphp-dbaTuxCaregdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in...8.8 Highphp-dbaTuxCareIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...7.5 Highphp-dbaTuxCareext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of...7.5 Highphp-dbaTuxCareUniversity of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other...7.5 High- Show moreLoading…