| CVE-2020-7071 |
In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like…
|
5.3
Medium
|
Feb 15, 2021 |
| CVE-2020-7070 |
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP…
|
4.3
Medium
|
Oct 2, 2020 |
| CVE-2020-7069 |
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with…
|
5.4
Medium
|
Oct 2, 2020 |
| CVE-2020-7068 |
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar…
|
4.8
Medium
|
Sep 9, 2020 |
| CVE-2019-11048 |
In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed,…
|
5.3
Medium
|
May 20, 2020 |
| CVE-2020-7067 |
In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support…
|
7.5
High
|
Apr 27, 2020 |
| CVE-2020-7066 |
In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with…
|
5.3
Medium
|
Apr 1, 2020 |
| CVE-2020-7065 |
In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding,…
|
7.4
High
|
Apr 1, 2020 |
| CVE-2020-7064 |
In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with…
|
6.5
Medium
|
Apr 1, 2020 |
| CVE-2020-7062 |
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if…
|
7.5
High
|
Feb 27, 2020 |
| CVE-2020-7063 |
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using…
|
5.5
Medium
|
Feb 27, 2020 |
| CVE-2020-7061 |
In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension,…
|
6.5
Medium
|
Feb 27, 2020 |
| CVE-2020-7060 |
When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below…
|
6.5
Medium
|
Feb 10, 2020 |
| CVE-2020-7059 |
When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14…
|
6.5
Medium
|
Feb 10, 2020 |
| CVE-2019-11050 |
When PHP EXIF extension is parsing EXIF information from an image, e.g
|
4.8
Medium
|
Dec 23, 2019 |
| CVE-2019-11049 |
In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to…
|
6.5
Medium
|
Dec 23, 2019 |
| CVE-2019-11047 |
When PHP EXIF extension is parsing EXIF information from an image, e.g
|
4.8
Medium
|
Dec 23, 2019 |
| CVE-2019-11046 |
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems,…
|
3.7
Low
|
Dec 23, 2019 |
| CVE-2019-11045 |
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with…
|
3.7
Low
|
Dec 23, 2019 |
| CVE-2019-11044 |
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames…
|
3.7
Low
|
Dec 23, 2019 |
| CVE-2019-11041 |
When PHP EXIF extension is parsing EXIF information from an image, e.g
|
4.8
Medium
|
Aug 9, 2019 |
| CVE-2019-11042 |
When PHP EXIF extension is parsing EXIF information from an image, e.g
|
4.8
Medium
|
Aug 9, 2019 |
| CVE-2019-11040 |
When PHP EXIF extension is parsing EXIF information from an image, e.g
|
4.8
Medium
|
Jun 18, 2019 |
| CVE-2019-11039 |
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may…
|
4.2
Medium
|
Jun 18, 2019 |
| CVE-2019-11038 |
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD…
|
3.1
Low
|
Jun 18, 2019 |