PHP.

Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

• PHP
• Weak cryptography or TLS
• CWE-252

Array overrun in common path resolve code

• PHP
• Memory corruption

DoS vulnerability when parsing multipart request body

• PHP
• Denial of service

password_verify() always returns true for some invalid hashes

• PHP
• Weak cryptography or TLS

OOB read due to insufficient input validation in imageloadfont()

• PHP
• Memory corruption

$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities

• PHP
• CWE-20
• CWE-1284

phar wrapper can occur dos when using quine gzip file

• PHP
• Denial of service

Heap buffer overflow in finfo_buffer

• PHP
• CWE-590

mysqlnd/pdo password buffer overflow

• PHP
• Memory corruption

Freeing unallocated memory in php_pgsql_free_params()

• PHP
• Memory corruption
• CWE-590

UAF due to php_filter_float() failing

• PHP
• Memory corruption

Special characters break path parsing in XML functions

• PHP
• CWE-159

PHP-FPM memory access in root process leading to privilege escalation

• PHP
• Broken access control
• Memory corruption

ZipArchive::extractTo may extract outside of destination dir

• PHP
• Path traversal

Incorrect URL validation in FILTER_VALIDATE_URL

• PHP
• CWE-20

Multiple vulnerabilities in Firebird client extension

• PHP
• Memory corruption

Null Dereference in SoapClient

• PHP
• Memory corruption

FILTER_VALIDATE_URL accepts URLs with invalid userinfo

• PHP
• CWE-20

PHP parses encoded cookie names so malicious `__Host-` cookies can be sent

• PHP
• CWE-20

Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV

• PHP
• CWE-20

Use of freed hash key in the phar_parse_zipfile function

• PHP
• Memory corruption

Temporary files are not cleaned after OOM when parsing HTTP request data

• PHP
• Memory corruption
• Denial of service

OOB Read in urldecode()

• PHP
• Memory corruption
• CWE-196

get_headers() silently truncates after a null byte

• PHP
• CWE-170

mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full

• PHP
• Memory corruption

Use-of-uninitialized-value in exif

• PHP
• Memory corruption

Files added to tar with Phar::buildFromIterator have all-access permissions

• PHP
• CWE-281

Null Pointer Dereference in PHP Session Upload Progress

• PHP
• Memory corruption

heap-buffer-overflow in phar_extract_file

• PHP
• Memory corruption

PHP: Use-after-free vulnerability in the add_post_var function in the Posthandler component in…

• PHP

global buffer-overflow in mbfl_filt_conv_big5_wchar

• PHP
• Memory corruption

OOB read in php_strip_tags_ex

• PHP
• Memory corruption

Use-after-free in exif parsing under memory sanitizer

• PHP
• Memory corruption

mail() may release string with refcount==1 twice

• PHP
• Memory corruption

Heap-buffer-overflow READ in exif

• PHP
• Memory corruption

Buffer underflow in bc_shift_addsub

• PHP
• Memory corruption

DirectoryIterator class silently truncates after a null byte

• PHP
• CWE-170

link() silently truncates after a null byte on Windows

• PHP
• CWE-170

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.

• zendframework
• PHP

Underflow in PHP-FPM can lead to RCE

• PHP
• Memory corruption

heap-buffer-overflow on exif_process_user_comment in EXIF extension

• PHP
• Memory corruption

heap-buffer-overflow on exif_scan_thumbnail in EXIF extension

• PHP
• Memory corruption

Heap buffer overflow in EXIF extension

• PHP
• Memory corruption

Out-of-bounds read in iconv.c

• PHP
• Memory corruption

Uninitialized read in gdImageCreateFromXbm

• PHP
• Memory corruption

Heap over-read in PHP EXIF extension

• PHP
• CWE-126

Heap over-read in PHP EXIF extension

• PHP
• Memory corruption

Heap over-read in PHP EXIF extension

• PHP
• Memory corruption