php-mysql vulnerabilities (TuxCare)
149 vulnerabilities.
php-mysqlTuxCareThe ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure...9.8 Criticalphp-mysqlTuxCareUse-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before...9.8 Criticalphp-mysqlTuxCareext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify...8.1 Highphp-mysqlTuxCareThe exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0...5.3 Mediumphp-mysqlTuxCareInteger overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5...8.8 Highphp-mysqlTuxCareInteger signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi...9.8 Criticalphp-mysqlTuxCareThe locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5...9.8 Criticalphp-mysqlTuxCareThe exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before...9.8 Criticalphp-mysqlTuxCareext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not...9.8 Criticalphp-mysqlTuxCareInteger overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38,...7.8 Highphp-mysqlTuxCareThe bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7...7.8 Highphp-mysqlTuxCareThe php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers...9.8 Criticalphp-mysqlTuxCareDouble free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension...9.8 Criticalphp-mysqlTuxCareInteger overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd)...8.8 Highphp-mysqlTuxCareInteger overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x...8.6 Highphp-mysqlTuxCareInteger overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36...8.6 Highphp-mysqlTuxCareThe get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6...8.6 Highphp-mysqlTuxCareThe odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior...7.5 Highphp-mysqlTuxCareZend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does...9.8 Criticalphp-mysqlTuxCareThe openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x...7.5 Highphp-mysqlTuxCareThe exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21,...9.8 Criticalphp-mysqlTuxCareThe grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...9.8 Criticalphp-mysqlTuxCareThe grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...9.8 Criticalphp-mysqlTuxCareThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...9.8 Criticalphp-mysqlTuxCareThe phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0...8.8 Highphp-mysqlTuxCareMultiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in...9.8 Criticalphp-mysqlTuxCareInteger signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote...9.8 Criticalphp-mysqlTuxCareStack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x...9.8 Criticalphp-mysqlTuxCareThe make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5...9.8 Criticalphp-mysqlTuxCareOff-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5...6.8 Mediumphp-mysqlTuxCareThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...7.5 Highphp-mysqlTuxCareThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...7.5 Highphp-mysqlTuxCareThe SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5...7.3 Highphp-mysqlTuxCareDirectory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28...7.5 Highphp-mysqlTuxCareMultiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6...7.3 Highphp-mysqlTuxCareStack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5...7.3 Highphp-mysqlTuxCareOracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and...5.9 Mediumphp-mysqlTuxCarePHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon...7.5 Highphp-mysqlTuxCareThe php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before...6.8 Mediumphp-mysqlTuxCareThe move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5...5.0 Mediumphp-mysqlTuxCareInteger overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as...7.5 Highphp-mysqlTuxCarereadelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x...7.5 Highphp-mysqlTuxCareDirectory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in...4.3 Mediumphp-mysqlTuxCarePHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...6.5 Mediumphp-mysqlTuxCareThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...7.5 Highphp-mysqlTuxCarePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...6.5 Mediumphp-mysqlTuxCareHeap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...10.0 Highphp-mysqlTuxCareSession fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote...6.8 Mediumphp-mysqlTuxCarePHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...5.0 Medium