Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hiphop vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2013-2714
Cross-site Scripting (XSS) in WordPress podPress Plugin 8.8.10.13 could allow remote malicious users to inject arbitrary web script or html via the 'playerID' parameter.
Podpress Project Podpress 8.8.10.13
1 EDB exploit
9.8
CVSSv3
CVE-2019-3570
Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are configurable by an attacker for instance by providing the output of scrypt_enc() in a context where Hack/PHP code would ...
Facebook Hiphop Virtual Machine 4.4.0
Facebook Hiphop Virtual Machine 4.5.0
Facebook Hiphop Virtual Machine 4.6.0
Facebook Hiphop Virtual Machine 4.7.0
Facebook Hiphop Virtual Machine 4.1.0
Facebook Hiphop Virtual Machine 4.3.0
Facebook Hiphop Virtual Machine 4.8.0
Facebook Hiphop Virtual Machine 4.2.0
Facebook Hiphop Virtual Machine
NA
CVE-2014-9714
Cross-site scripting (XSS) vulnerability in the WddxPacket::recursiveAddVar function in HHVM (aka the HipHop Virtual Machine) prior to 3.5.0 allows remote malicious users to inject arbitrary web script or HTML via a crafted string to the wddx_serialize_value function.
Facebook Hiphop Virtual Machine
NA
CVE-2014-6228
Integer overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine (HHVM) prior to 3.3.0 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via crafted a...
Facebook Hiphop Virtual Machine
NA
CVE-2014-2208
CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine (HHVM) prior to 2.4.2 allows remote malicious users to execute arbitrary commands by entering a \n (newline) character before the end of a st...
Facebook Hiphop Virtual Machine
NA
CVE-2014-6229
The HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) prior to 3.3.0 incorrectly expects that a certain key string uses '\0' for termination, which allows remote malicious users to obtain sensitive information by leveraging rea...
Facebook Hiphop Virtual Machine
NA
CVE-2014-5386
The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) prior to 3.3.0 does not seed the random number generator, which makes it easier for remote malicious users to defeat cryptographic protection mechanisms by leveraging...
Facebook Hiphop Virtual Machine
NA
CVE-2014-2209
Facebook HipHop Virtual Machine (HHVM) prior to 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/util/light-process.cpp, which allows remote malicious users to bypass intended access restrictions by leveraging group permissions for a fil...
Facebook Hiphop Virtual Machine
NA
CVE-2013-1636
Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin prior to 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 up to and including 4.2.9 and 4.3.0 u...
Blair Williams Pretty Link Lite 1.6.0
Blair Williams Pretty Link Lite 1.6.1
Blair Williams Pretty Link Lite
Joobi Com Jnews 8.0.1
Civicrm Civicrm 4.3.1
Civicrm Civicrm 3.1.1
Civicrm Civicrm 3.1.2
Civicrm Civicrm 3.2.2
Civicrm Civicrm 3.2.3
Civicrm Civicrm 3.3.6
Civicrm Civicrm 3.4.0
Civicrm Civicrm 4.1.5
Civicrm Civicrm 4.1.6
Civicrm Civicrm 4.2.7
Civicrm Civicrm 4.2.8
Civicrm Civicrm 4.3.3
Civicrm Civicrm 3.1.0
Civicrm Civicrm 3.2.0
Civicrm Civicrm 3.2.1
Civicrm Civicrm 3.3.3
Civicrm Civicrm 3.3.5
Civicrm Civicrm 4.1.3
1 EDB exploit
NA
CVE-2014-1439
The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp in HipHop Virtual Machine for PHP (HHVM) prior to 2.4.0 and 2.3.x prior to 2.3.3 does not properly disable a certain libxml handler, which allows remote malicious users to conduct XML External Entity (XXE)...
Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.0.1
Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.0.0
Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.3.0
Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.2.0
Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.1.0
Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.0.2
Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php
Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.3.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »