Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

php php 5.4.27 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2

CVE-2014-3597

Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP prior to 5.4.32 and 5.5.x prior to 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_g...
Php Php 5.5.0Php Php 5.4.12Php Php 5.4.15Php PhpPhp Php 5.4.19Php Php 5.5.1Php Php 5.5.5Php Php 5.4.14Php Php 5.4.8Php Php 5.5.14Php Php 5.4.17Php Php 5.5.7Php Php 5.4.22Php Php 5.4.9Php Php 5.4.11Php Php 5.5.12Php Php 5.4.10Php Php 5.5.6Php Php 5.4.2Php Php 5.5.3Php Php 5.4.27Php Php 5.5.8
6.4
CVSSv2

CVE-2014-5120

gd_ctx.c in the GD component in PHP 5.4.x prior to 5.4.32 and 5.5.x prior to 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote malicious users to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd...
Php Php 5.5.0Php Php 5.4.12Php Php 5.4.15Php Php 5.4.19Php Php 5.5.1Php Php 5.5.5Php Php 5.4.14Php Php 5.4.8Php Php 5.5.14Php Php 5.4.17Php Php 5.5.7Php Php 5.4.22Php Php 5.4.9Php Php 5.4.11Php Php 5.5.12Php Php 5.4.10Php Php 5.5.6Php Php 5.4.2Php Php 5.5.3Php Php 5.4.27Php Php 5.5.8Php Php 5.4.16
5
CVSSv2

CVE-2016-7478

Zend/zend_exceptions.c in PHP, possibly 5.x prior to 5.6.28 and 7.x prior to 7.0.13, allows remote malicious users to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
Php Php 5.6.1Php Php 5.5.36Php Php 5.5.0Php Php 5.6.0Php Php 5.5.34Php Php 5.2.9Php Php 5.4.12Php Php 5.3.10Php Php 7.0.11Php Php 5.3.27Php Php 5.1.5Php Php 5.5.19Php Php 7.0.4Php Php 5.4.15Php Php 5.6.12Php Php 5.5.25Php Php 5.3.6Php Php 5.6.26Php Php 5.3.9Php Php 5.1.2Php Php 5.6.24Php Php 5.4.44
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook