Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

php vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2011-1092

Integer overflow in ext/shmop/shmop.c in PHP prior to 5.3.6 allows context-dependent malicious users to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.2.4Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 5.2.16Php Php 4.3.4
NA

CVE-2011-0421

The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP prior to 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent malicious users to cause a denial of service (NULL pointer dereference) via an empty ZIP...
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.2.4Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 5.2.16Php Php 4.3.4
NA

CVE-2011-0708

exif.c in the Exif extension in PHP prior to 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote malicious users to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.2.4Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 5.2.16Php Php 4.3.4
NA

CVE-2011-1464

Buffer overflow in the strval function in PHP prior to 5.3.6, when the precision configuration option has a large value, might allow context-dependent malicious users to cause a denial of service (application crash) via a small numerical value in the argument.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.2.4Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 5.2.16Php Php 4.3.4
NA

CVE-2011-1466

Integer overflow in the SdnToJulian function in the Calendar extension in PHP prior to 5.3.6 allows context-dependent malicious users to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.2.4Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 5.2.16Php Php 4.3.4
NA

CVE-2011-1467

Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP prior to 5.3.6 allows context-dependent malicious users to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-...
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.2.4Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 5.2.16Php Php 4.3.4
NA

CVE-2011-1468

Multiple memory leaks in the OpenSSL extension in PHP prior to 5.3.6 might allow remote malicious users to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.2.4Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 5.2.16Php Php 4.3.4
NA

CVE-2011-1469

Unspecified vulnerability in the Streams component in PHP prior to 5.3.6 allows context-dependent malicious users to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.2.4Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 5.2.16Php Php 4.3.4
NA

CVE-2011-1470

The Zip extension in PHP prior to 5.3.6 allows context-dependent malicious users to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.2.4Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 5.2.16Php Php 4.3.4
NA

CVE-2008-4107

The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows malicious users to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset funct...
Php Php 4.3.9Php Php 4.0Php Php 4.2.0Php Php 4.4.4Php Php 4.1.0Php Php 4.3.4Php Php 4.3.0Php Php 4.0.5Php Php 4.3.6Php Php 4.0.7Php Php 4.3.7Php Php 4.2.2Php Php 4.4.2Php Php 4.3.2Php Php 4.3.11Php Php 4.0.0Php Php 4.0.3Php Php 4.0.2Php Php 4.3.3Php Php 4.1.1Php Php 4.4.3Php Php 4.2.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-9474CVE-2024-36620file inclusioncache poisoningman-in-the-middleCVE-2024-20138CVE-2024-0012CVE-2024-20131CVE-2024-11995
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook