php7 vulnerabilities (openSUSE)
172 vulnerabilities.
php7openSUSEPHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...5.0 Mediumphp7openSUSEstrtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and...5.0 Mediumphp7openSUSEDouble free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c...5.0 Mediumphp7openSUSEThe ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3...4.3 Mediumphp7openSUSEfopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir...5.0 Mediumphp7openSUSEStack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x...4.3 Mediumphp7openSUSEFormat string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows...6.8 Mediumphp7openSUSEUse-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through...7.5 Highphp7openSUSEThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...9.8 Criticalphp7openSUSEThe dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of...4.3 Mediumphp7openSUSEThe iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1...5.0 Mediumphp7openSUSEThe substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause...6.4 Mediumphp7openSUSEDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass...2.6 Lowphp7openSUSECross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote...4.3 Mediumphp7openSUSEPHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary...5.0 Mediumphp7openSUSEThe c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check...9.3 Highphp7openSUSEThe exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to...5.0 Mediumphp7openSUSEUnspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2,...7.5 Highphp7openSUSEMultiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and...7.5 Highphp7openSUSEThe RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals...7.5 Highphp7openSUSEThe parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one...5.0 Mediumphp7openSUSECross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x...4.3 Medium