Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 5.5.16 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2015-4642
The escapeshellarg function in ext/standard/exec.c in PHP prior to 5.4.42, 5.5.x prior to 5.5.26, and 5.6.x prior to 5.6.10 on Windows allows remote malicious users to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a c...
Php PhpPhp Php 5.5.0Php Php 5.5.1Php Php 5.5.2Php Php 5.5.3Php Php 5.5.4Php Php 5.5.5Php Php 5.5.6Php Php 5.5.7Php Php 5.5.8Php Php 5.5.9Php Php 5.5.10Php Php 5.5.11Php Php 5.5.12Php Php 5.5.13Php Php 5.5.14Php Php 5.5.15Php Php 5.5.16Php Php 5.5.17Php Php 5.5.18Php Php 5.5.19Php Php 5.5.20
7.5
CVSSv2
CVE-2016-4071
Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP prior to 5.5.34, 5.6.x prior to 5.6.20, and 7.x prior to 7.0.5 allows remote malicious users to execute arbitrary code via format string specifiers in an SNMP::get call.
Php Php 5.6.1Php Php 5.6.0Php Php 5.6.5Php Php 5.6.12Php Php 5.6.13Php Php 5.6.4Php Php 5.6.6Php Php 5.6.18Php Php 5.6.11Php Php 5.6.2Php Php 5.6.10Php Php 5.6.7Php Php 5.6.15Php Php 5.6.17Php Php 5.6.16Php Php 5.6.9Php Php 5.6.3Php Php 5.6.8Php Php 5.6.14Php Php 5.6.19Apple Mac Os XPhp Php 5.5.0
7.5
CVSSv2
CVE-2015-4598
PHP prior to 5.4.42, 5.5.x prior to 5.5.26, and 5.6.x prior to 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote malicious users to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2...
Redhat Enterprise Linux Server Eus 7.1Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node Eus 7.1Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Php Php 5.5.25Php Php 5.5.24Php Php 5.6.2Php Php 5.6.1Php Php 5.5.18Php Php 5.6.7Php Php 5.6.6Php Php 5.5.22Php Php 5.5.21Php Php 5.5.14Php Php 5.5.13Php Php 5.5.6Php Php 5.5.5Php Php 5.5.4Php Php 5.6.5Php Php 5.6.4
7.5
CVSSv2
CVE-2015-2331
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and previous versions, as used in the ZIP extension in PHP prior to 5.4.39, 5.5.x prior to 5.5.23, and 5.6.x prior to 5.6.7 and other products, allows remote malicious users to cause a denial of servi...
Nih LibzipPhp Php 5.6.1Php Php 5.5.0Php Php 5.6.0Php Php 5.6.5Php Php 5.5.19Php Php 5.5.16Php Php 5.5.1Php Php 5.5.5Php Php 5.6.4Php Php 5.5.21Php Php 5.6.6Php Php 5.5.17Php Php 5.5.14Php Php 5.5.7Php Php 5.6.2Php Php 5.5.12Php PhpPhp Php 5.5.6Php Php 5.5.3Php Php 5.5.8Php Php 5.5.15
7.5
CVSSv2
CVE-2014-9705
Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP prior to 5.4.38, 5.5.x prior to 5.5.22, and 5.6.x prior to 5.6.6 allows remote malicious users to execute arbitrary code via vectors that trigger creation of multiple dictionari...
Php Php 5.5.0Php Php 5.5.13Php Php 5.5.14Php Php 5.5.20Php Php 5.5.21Php Php 5.6.0Php Php 5.6.1Php Php 5.5.1Php Php 5.5.10Php Php 5.5.17Php Php 5.5.18Php Php 5.5.5Php Php 5.5.6Php Php 5.6.4Php Php 5.6.5Php Php 5.5.15Php Php 5.5.16Php Php 5.5.3Php Php 5.5.4Php Php 5.6.2Php Php 5.6.3Php Php
7.5
CVSSv2
CVE-2015-0273
Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP prior to 5.4.38, 5.5.x prior to 5.5.22, and 5.6.x prior to 5.6.6 allow remote malicious users to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZon...
Php Php 5.6.1Php Php 5.5.0Php Php 5.6.0Php Php 5.6.5Php Php 5.5.19Php Php 5.5.16Php Php 5.5.1Php Php 5.5.5Php Php 5.6.4Php Php 5.5.21Php Php 5.5.17Php PhpPhp Php 5.5.14Php Php 5.5.7Php Php 5.6.2Php Php 5.5.12Php Php 5.5.6Php Php 5.5.3Php Php 5.5.8Php Php 5.5.15Php Php 5.5.11Php Php 5.5.13
6.8
CVSSv2
CVE-2014-3597
Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP prior to 5.4.32 and 5.5.x prior to 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_g...
Php Php 5.4.10Php Php 5.4.11Php Php 5.4.14Php Php 5.4.15Php Php 5.4.20Php Php 5.4.21Php Php 5.4.29Php Php 5.4.3Php Php 5.4.8Php Php 5.4.9Php Php 5.5.3Php Php 5.5.2Php Php 5.4.0Php Php 5.4.12Php Php 5.4.13Php Php 5.4.17Php Php 5.4.18Php Php 5.4.25Php Php 5.4.26Php Php 5.4.4Php Php 5.4.5Php Php 5.5.7
6.4
CVSSv2
CVE-2016-3185
The make_http_soap_request function in ext/soap/php_http.c in PHP prior to 5.4.44, 5.5.x prior to 5.5.28, 5.6.x prior to 5.6.12, and 7.x prior to 7.0.4 allows remote malicious users to obtain sensitive information from process memory or cause a denial of service (type confusion a...
Php Php 5.6.1Php Php 5.6.0Php Php 5.6.5Php Php 5.6.4Php Php 5.6.6Php Php 5.6.11Php Php 5.6.2Php Php 5.6.10Php Php 5.6.7Php Php 5.6.9Php Php 5.6.3Php Php 5.6.8Php PhpPhp Php 7.0.3Php Php 7.0.1Php Php 7.0.2Php Php 7.0.0Php Php 5.5.0Php Php 5.5.19Php Php 5.5.25Php Php 5.5.16Php Php 5.5.1
6.4
CVSSv2
CVE-2014-5120
gd_ctx.c in the GD component in PHP 5.4.x prior to 5.4.32 and 5.5.x prior to 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote malicious users to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd...
Php Php 5.4.0Php Php 5.4.12Php Php 5.4.13Php Php 5.4.18Php Php 5.4.19Php Php 5.4.25Php Php 5.4.26Php Php 5.4.4Php Php 5.4.5Php Php 5.5.6Php Php 5.5.5Php Php 5.5.12Php Php 5.5.11Php Php 5.5.0Php Php 5.4.10Php Php 5.4.11Php Php 5.4.15Php Php 5.4.21Php Php 5.4.22Php Php 5.4.29Php Php 5.4.3Php Php 5.4.9
4.3
CVSSv2
CVE-2015-8838
ext/mysqlnd/mysqlnd.c in PHP prior to 5.4.43, 5.5.x prior to 5.5.27, and 5.6.x prior to 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle malicious users to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152...
Php Php 5.5.0Php Php 5.5.19Php Php 5.5.25Php Php 5.5.16Php Php 5.5.1Php Php 5.5.5Php Php 5.5.21Php Php 5.5.17Php Php 5.5.14Php Php 5.5.7Php Php 5.5.12Php Php 5.5.6Php Php 5.5.3Php Php 5.5.23Php Php 5.5.8Php Php 5.5.24Php Php 5.5.15Php Php 5.5.11Php Php 5.5.13Php Php 5.5.4Php Php 5.5.26Php Php 5.5.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook