php vulnerabilities (TuxCare)
176 vulnerabilities.
phpTuxCarepassword_verify() always returns true for some invalid hashes7.7 HighphpTuxCarePDO::quote() may return unquoted string9.1 CriticalphpTuxCareOOB read due to insufficient input validation in imageloadfont()6.5 MediumphpTuxCareBuffer overflow in sponge queue functions9.8 CriticalphpTuxCare$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 MediumphpTuxCarephar wrapper can occur dos when using quine gzip file2.3 LowphpTuxCaremysqlnd/pdo password buffer overflow7.5 HighphpTuxCareFreeing unallocated memory in php_pgsql_free_params()8.1 HighphpTuxCareUpdate of php 5.3: Remove mariadb102 patch to eliminate faulty functionalityNo scorephpTuxCareUpdate of php 5.3: Fix segfault during graceful Apache restartNo scorephpTuxCareUAF due to php_filter_float() failing8.2 HighphpTuxCareSpecial characters break path parsing in XML functions5.3 MediumphpTuxCarePHP-FPM memory access in root process leading to privilege escalation7.8 HighphpTuxCareIncorrect URL validation in FILTER_VALIDATE_URL4.3 MediumphpTuxCareMultiple vulnerabilities in Firebird client extension5.0 MediumphpTuxCareNull Dereference in SoapClient5.3 MediumphpTuxCareFILTER_VALIDATE_URL accepts URLs with invalid userinfo5.3 MediumphpTuxCarePHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 MediumphpTuxCareWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 MediumphpTuxCareUse of freed hash key in the phar_parse_zipfile function4.8 MediumphpTuxCareTemporary files are not cleaned after OOM when parsing HTTP request data5.3 MediumphpTuxCareOOB Read in urldecode()7.5 HighphpTuxCareOOB read in php_strip_tags_ex6.5 MediumphpTuxCareUse-after-free in exif parsing under memory sanitizer4.8 MediumphpTuxCareHeap-buffer-overflow READ in exif4.8 MediumphpTuxCareBuffer underflow in bc_shift_addsub3.7 LowphpTuxCareDirectoryIterator class silently truncates after a null byte3.7 LowphpTuxCareOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...7.5 HighphpTuxCareAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...7.5 HighphpTuxCareheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 MediumphpTuxCareheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 MediumphpTuxCareA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...9.8 CriticalphpTuxCareHeap buffer overflow in EXIF extension4.8 MediumphpTuxCareHeap over-read in PHP EXIF extension4.8 MediumphpTuxCareHeap over-read in PHP EXIF extension4.8 MediumphpTuxCareHeap over-read in PHP EXIF extension4.8 MediumphpTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...9.8 CriticalphpTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 HighphpTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 HighphpTuxCareAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 HighphpTuxCareAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...7.5 HighphpTuxCareAn issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2....7.5 HighphpTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...7.5 HighphpTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 CriticalphpTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 CriticalphpTuxCareAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 CriticalphpTuxCaregdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in...8.8 HighphpTuxCareIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...7.5 HighphpTuxCareext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of...7.5 HighphpTuxCareUniversity of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other...7.5 High- Show moreLoading…