tenable tenable.sc 5.19.0 vulnerabilities and exploits

(subscribe to this query)

In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the ...

Php Php Tenable Tenable.sc Tenable Tenable.sc 5.19.0 Opensuse Leap 15.1 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.

Php Php Tenable Tenable.sc

In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.

Php Php Debian Debian Linux 10.0 Tenable Tenable.sc

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

Php Php Tenable Tenable.sc Oracle Communications Diameter Signaling Router Debian Debian Linux 9.0 Debian Debian Linux 10.0

1 Github repository

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is ...

Php Php 7.4.0 Php Php Tenable Securitycenter Fedoraproject Fedora 30 Fedoraproject Fedora 31

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or cr...

Php Php Tenable Tenable.sc Oracle Communications Diameter Signaling Router Opensuse Leap 15.1 Debian Debian Linux 8.0

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to ...

Php Php Tenable Tenable.sc Oracle Communications Diameter Signaling Router Opensuse Leap 15.1 Debian Debian Linux 8.0

pragma.c in SQLite up to and including 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

Sqlite Sqlite Siemens Sinec Infrastructure Network Services Tenable Tenable.sc Oracle Mysql Workbench Netapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -

alter.c in SQLite up to and including 3.30.1 allows malicious users to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

Sqlite Sqlite Netapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -Oracle Mysql Workbench Tenable Tenable.sc Siemens Sinec Infrastructure Network Services

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more re...

Php Php Tenable Tenable.sc Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.1

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook