Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 5.5.6 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2014-2020
ext/gd/gd.c in PHP 5.5.x prior to 5.5.9 does not check data types, which might allow remote malicious users to obtain sensitive information by using a (1) string or (2) array data type in place of a numeric data type, as demonstrated by an imagecrop function call with a string fo...
Php PhpPhp Php 5.5.7Php Php 5.5.0Php Php 5.5.2Php Php 5.5.1Php Php 5.5.4Php Php 5.5.3Php Php 5.5.6Php Php 5.5.5
6.8
CVSSv2
CVE-2013-7226
Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x prior to 5.5.9 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading ...
Php Php 5.5.0Php Php 5.5.1Php Php 5.5.5Php Php 5.5.7Php Php 5.5.6Php Php 5.5.3Php Php 5.5.8Php Php 5.5.4Php Php 5.5.2
5.8
CVSSv2
CVE-2013-7328
Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x prior to 5.5.9 allow remote malicious users to cause a denial of service (application crash) or obtain sensitive information via an imagecrop function call with a negative value for the (1)...
Php Php 5.5.0Php Php 5.5.1Php Php 5.5.5Php Php 5.5.7Php Php 5.5.6Php Php 5.5.3Php Php 5.5.8Php Php 5.5.4Php Php 5.5.2
6.8
CVSSv2
CVE-2016-6174
applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) prior to 4.1.13, when used with PHP prior to 5.4.24 or 5.5.x prior to 5.5.8, allows remote malicious users to execute arbitrary code v...
Invisioncommunity Invision Power BoardPhp Php 5.5.2Php Php 5.5.1Php Php 5.5.0Php Php 5.5.7Php Php 5.5.6Php Php 5.5.5Php Php 5.5.4Php Php 5.5.3Php Php
6.8
CVSSv2
CVE-2013-7327
The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x prior to 5.5.9 does not check return values, which allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a N...
Canonical Ubuntu Linux 13.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 10.04Php Php 5.5.0Php Php 5.5.1Php Php 5.5.5Php Php 5.5.7Php Php 5.5.6Php Php 5.5.3Php Php 5.5.4Php PhpPhp Php 5.5.2
7.5
CVSSv2
CVE-2015-0273
Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP prior to 5.4.38, 5.5.x prior to 5.5.22, and 5.6.x prior to 5.6.6 allow remote malicious users to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZon...
Php Php 5.6.1Php Php 5.5.0Php Php 5.6.0Php Php 5.6.5Php Php 5.5.19Php Php 5.5.16Php Php 5.5.1Php Php 5.5.5Php Php 5.6.4Php Php 5.5.21Php Php 5.5.17Php PhpPhp Php 5.5.14Php Php 5.5.7Php Php 5.6.2Php Php 5.5.12Php Php 5.5.6Php Php 5.5.3Php Php 5.5.8Php Php 5.5.15Php Php 5.5.11Php Php 5.5.13
7.5
CVSSv2
CVE-2014-9705
Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP prior to 5.4.38, 5.5.x prior to 5.5.22, and 5.6.x prior to 5.6.6 allows remote malicious users to execute arbitrary code via vectors that trigger creation of multiple dictionari...
Php Php 5.5.0Php Php 5.5.13Php Php 5.5.14Php Php 5.5.20Php Php 5.5.21Php Php 5.6.0Php Php 5.6.1Php Php 5.5.1Php Php 5.5.10Php Php 5.5.17Php Php 5.5.18Php Php 5.5.5Php Php 5.5.6Php Php 5.6.4Php Php 5.6.5Php Php 5.5.15Php Php 5.5.16Php Php 5.5.3Php Php 5.5.4Php Php 5.6.2Php Php 5.6.3Php Php
10
CVSSv2
CVE-2015-4642
The escapeshellarg function in ext/standard/exec.c in PHP prior to 5.4.42, 5.5.x prior to 5.5.26, and 5.6.x prior to 5.6.10 on Windows allows remote malicious users to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a c...
Php PhpPhp Php 5.5.0Php Php 5.5.1Php Php 5.5.2Php Php 5.5.3Php Php 5.5.4Php Php 5.5.5Php Php 5.5.6Php Php 5.5.7Php Php 5.5.8Php Php 5.5.9Php Php 5.5.10Php Php 5.5.11Php Php 5.5.12Php Php 5.5.13Php Php 5.5.14Php Php 5.5.15Php Php 5.5.16Php Php 5.5.17Php Php 5.5.18Php Php 5.5.19Php Php 5.5.20
7.5
CVSSv2
CVE-2015-2331
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and previous versions, as used in the ZIP extension in PHP prior to 5.4.39, 5.5.x prior to 5.5.23, and 5.6.x prior to 5.6.7 and other products, allows remote malicious users to cause a denial of servi...
Nih LibzipPhp Php 5.6.1Php Php 5.5.0Php Php 5.6.0Php Php 5.6.5Php Php 5.5.19Php Php 5.5.16Php Php 5.5.1Php Php 5.5.5Php Php 5.6.4Php Php 5.5.21Php Php 5.6.6Php Php 5.5.17Php Php 5.5.14Php Php 5.5.7Php Php 5.6.2Php Php 5.5.12Php PhpPhp Php 5.5.6Php Php 5.5.3Php Php 5.5.8Php Php 5.5.15
4.3
CVSSv2
CVE-2015-8838
ext/mysqlnd/mysqlnd.c in PHP prior to 5.4.43, 5.5.x prior to 5.5.27, and 5.6.x prior to 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle malicious users to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152...
Php Php 5.5.0Php Php 5.5.19Php Php 5.5.25Php Php 5.5.16Php Php 5.5.1Php Php 5.5.5Php Php 5.5.21Php Php 5.5.17Php Php 5.5.14Php Php 5.5.7Php Php 5.5.12Php Php 5.5.6Php Php 5.5.3Php Php 5.5.23Php Php 5.5.8Php Php 5.5.24Php Php 5.5.15Php Php 5.5.11Php Php 5.5.13Php Php 5.5.4Php Php 5.5.26Php Php 5.5.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook