php7 vulnerabilities (openSUSE)
172 vulnerabilities.
php7openSUSEsapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x...7.5 Highphp7openSUSEThe exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21,...6.8 Mediumphp7openSUSEUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 Highphp7openSUSEThe exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x...6.8 Mediumphp7openSUSEInteger overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5...7.5 Highphp7openSUSEBuffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc...5.0 Mediumphp7openSUSEThe PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to...3.6 Lowphp7openSUSEgd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure...6.4 Mediumphp7openSUSEMultiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32...6.8 Mediumphp7openSUSEInteger overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in...4.3 Mediumphp7openSUSEUse-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14...4.6 Mediumphp7openSUSEUse-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14...4.6 Mediumphp7openSUSEfile before 5.19 does not properly restrict the amount of data read during a regex search, which...5.0 Mediumphp7openSUSEHeap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4...5.1 Mediumphp7openSUSEThe cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5...5.0 Mediumphp7openSUSEThe cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and...5.0 Mediumphp7openSUSEInteger overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka...6.8 Mediumphp7openSUSEsapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x...7.2 Highphp7openSUSEThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...4.3 Mediumphp7openSUSEThe BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...5.0 Mediumphp7openSUSEsoftmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial...4.3 Mediumphp7openSUSEThe gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values,...6.8 Mediumphp7openSUSEFine Free file before 5.17 allows context-dependent attackers to cause a denial of service ...5.0 Mediumphp7openSUSEThe asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4...7.5 Highphp7openSUSEThe scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly...5.0 Mediumphp7openSUSEHeap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...10.0 Highphp7openSUSEThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...4.3 Mediumphp7openSUSESession fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote...6.8 Mediumphp7openSUSEext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote...6.8 Mediumphp7openSUSEThe SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read...4.3 Mediumphp7openSUSEThe SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read...5.0 Mediumphp7openSUSEext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship...7.5 Highphp7openSUSEThe SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir...5.0 Mediumphp7openSUSEUnspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...10.0 Highphp7openSUSEsapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...5.0 Mediumphp7openSUSEphp-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers...7.5 Highphp7openSUSEsapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...7.5 Highphp7openSUSEsapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ...7.5 Highphp7openSUSEThe php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to...7.5 Highphp7openSUSEPHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow...5.0 Mediumphp7openSUSEPHP before 5.3.9 computes hash values for form parameters without restricting the ability to...5.0 Mediumphp7openSUSEInteger overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4...6.4 Mediumphp7openSUSEThe is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes...7.5 Highphp7openSUSEThe rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...6.4 Mediumphp7openSUSEInteger overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows...5.0 Mediumphp7openSUSEexif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...4.3 Mediumphp7openSUSEThe _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does...4.3 Mediumphp7openSUSEMultiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and...7.5 Highphp7openSUSEInteger overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to...7.5 Highphp7openSUSEThe grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5...5.0 Medium- Show moreLoading…