php5 vulnerabilities (Ubuntu)
282 vulnerabilities.
php5UbuntuAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...8.8 Highphp5UbuntuAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...7.5 Highphp5UbuntuAn issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1...6.1 Mediumphp5UbuntuAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...7.5 Highphp5UbuntuAn issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x...4.7 Mediumphp5UbuntuIn PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there...9.8 Criticalphp5UbuntuAn issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20....6.5 Mediumphp5UbuntuAn issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x...6.1 Mediumphp5UbuntuIn PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension...7.5 Highphp5UbuntuThe finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x...9.8 Criticalphp5UbuntuIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in...7.8 Highphp5UbuntuIn PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not...9.8 Criticalphp5UbuntuIn PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers...9.1 Criticalphp5UbuntuIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's...7.5 Highphp5UbuntuIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM...7.5 Highphp5UbuntuIn PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be...7.5 Highphp5UbuntuIn PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the...7.5 Highphp5UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...7.5 Highphp5UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp5UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp5UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp5UbuntuAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Criticalphp5UbuntuThe i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...9.8 Criticalphp5Ubuntu** DISPUTED ** The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1...7.5 Highphp5Ubuntu** DISPUTED ** The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers...7.5 Highphp5UbuntuPHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen...7.4 Highphp5UbuntuAn issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or...7.5 Highphp5UbuntuIn PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of...7.5 Highphp5UbuntuPEAR core file overwrite vulnerability7.5 Highphp5UbuntuThe object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before...7.5 Highphp5UbuntuOff-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...9.8 Criticalphp5UbuntuInteger overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...7.5 Highphp5UbuntuThe exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15...7.5 Highphp5UbuntuIn all versions of PHP 7, during the unserialization process, resizing the 'properties' hash...9.8 Criticalphp5UbuntuThe get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29,...9.8 Criticalphp5UbuntuThe php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14...9.8 Criticalphp5Ubuntuext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a...7.5 Highphp5UbuntuPHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup...9.8 Criticalphp5UbuntuZend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote...7.5 Highphp5UbuntuUse-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before...9.8 Criticalphp5UbuntuThe php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11...7.5 Highphp5Ubuntuext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray...9.8 Criticalphp5Ubuntuext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not...7.5 Highphp5UbuntuThe ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure...9.8 Criticalphp5UbuntuUse-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before...9.8 Criticalphp5Ubuntuext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify...8.1 Highphp5Ubuntuext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures,...9.8 Criticalphp5Ubuntuext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow,...9.8 Criticalphp5UbuntuZend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc...8.1 Highphp5Ubuntuext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a...7.5 High- Show moreLoading…