php8 vulnerabilities (openSUSE)
174 vulnerabilities.
php8openSUSEArchive_Tar contains Potential RCE if filename starts with phar://8.8 Highphp8openSUSEIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...7.5 Highphp8openSUSEext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of...7.5 Highphp8openSUSEThe Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x...6.1 Mediumphp8openSUSELibgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function...8.8 Highphp8openSUSEPHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and...9.8 Criticalphp8openSUSEexif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x...5.5 Mediumphp8openSUSEexif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a...9.8 Criticalphp8openSUSEOracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and...5.9 Mediumphp8openSUSEThe sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement...7.5 Highphp8openSUSESQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which...7.5 Highphp8openSUSEMultiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before...7.5 Highphp8openSUSEUse-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the...7.5 Highphp8openSUSE** DISPUTED ** The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in...7.5 Highphp8openSUSEsapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x...7.5 Highphp8openSUSEUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 Highphp8openSUSEThe exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x...6.8 Mediumphp8openSUSEBuffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc...5.0 Mediumphp8openSUSEThe PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to...3.6 Lowphp8openSUSEMultiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32...6.8 Mediumphp8openSUSEUse-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14...4.6 Mediumphp8openSUSEUse-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14...4.6 Mediumphp8openSUSEfile before 5.19 does not properly restrict the amount of data read during a regex search, which...5.0 Mediumphp8openSUSEHeap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4...5.1 Mediumphp8openSUSEThe cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5...5.0 Mediumphp8openSUSEsapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x...7.2 Highphp8openSUSEThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...4.3 Mediumphp8openSUSEThe BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...5.0 Mediumphp8openSUSEThe gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values,...6.8 Mediumphp8openSUSEFine Free file before 5.17 allows context-dependent attackers to cause a denial of service ...5.0 Mediumphp8openSUSEThe asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4...7.5 Highphp8openSUSEThe scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly...5.0 Mediumphp8openSUSEHeap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...10.0 Highphp8openSUSEThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...4.3 Mediumphp8openSUSEext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote...6.8 Mediumphp8openSUSEThe SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read...5.0 Mediumphp8openSUSEext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship...7.5 Highphp8openSUSEThe SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir...5.0 Mediumphp8openSUSEUnspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...10.0 Highphp8openSUSEsapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ...7.5 Highphp8openSUSEThe php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to...7.5 Highphp8openSUSEPHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow...5.0 Mediumphp8openSUSEPHP before 5.3.9 computes hash values for form parameters without restricting the ability to...5.0 Mediumphp8openSUSEInteger overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4...6.4 Mediumphp8openSUSEThe is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes...7.5 Highphp8openSUSEThe rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...6.4 Mediumphp8openSUSEInteger overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows...5.0 Mediumphp8openSUSEexif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...4.3 Mediumphp8openSUSEThe _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does...4.3 Mediumphp8openSUSEMultiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and...7.5 High- Show moreLoading…