Skip to content
OpenAdvisories

Package · Ubuntu

php5

271 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

270 results · Feed

  • Unscored —
    CVE-2015-2787 EPSS 12%

    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

    php5 Ubuntu
  • Unscored —
    CVE-2013-6501

    The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 spec…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2014-9705 EPSS 19%

    Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5…

    php5 Ubuntu
  • Unscored —
    CVE-2014-9652

    The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2015-0232 EPSS 16%

    The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 …

    php5 Ubuntu
  • Unscored —
    CVE-2015-0231 Public exploit EPSS 44%

    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

    php5 Ubuntu
  • Unscored —
    CVE-2014-9427 EPSS 18%

    sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mma…

    php5 Ubuntu
  • Unscored —
    CVE-2014-8142 Public exploit EPSS 55%

    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

    php5 Ubuntu
  • Unscored —
    CVE-2014-8117

    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of s…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3710 EPSS 14%

    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3668 EPSS 27%

    Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC ex…

    php5 Ubuntu
  • Unscored —
    CVE-2014-3670 EPSS 23%

    The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x b…

    php5 Ubuntu
  • Unscored —
    CVE-2014-3669 EPSS 29%

    Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.…

    php5 Ubuntu
  • Unscored —
    CVE-2014-5459

    The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symli…

    php5 php-pear Ubuntu
  • Unscored —
    CVE-2014-3587 EPSS 20%

    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo componen…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3597 EPSS 15%

    Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.1…

    php5 Ubuntu
  • Unscored —
    CVE-2014-4698

    Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent…

    php5 Ubuntu
  • Unscored —
    CVE-2014-4670

    Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependen…

    php5 Ubuntu
  • Medium 6.5
    CVE-2014-0207 EPSS 17%

    The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30…

    php5 file file Debian Ubuntu
  • Medium 6.5
    CVE-2014-3478 EPSS 15%

    Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP b…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3487 EPSS 15%

    The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3515 EPSS 30%

    The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures wil…

    php5 Ubuntu
  • Unscored —
    CVE-2014-3479 EPSS 15%

    The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.…

    php5 file file Debian Ubuntu
  • Medium 6.5
    CVE-2014-3480 EPSS 11%

    The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-4721

    The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of t…

    php5 Ubuntu
  • Unscored —
    CVE-2014-4049 EPSS 11%

    Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remot…

    php5 Ubuntu
  • Unscored —
    CVE-2014-0237 EPSS 20%

    The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 al…

    php5 file Debian Ubuntu
  • Unscored —
    CVE-2014-0238 EPSS 21%

    The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 all…

    php5 file Debian Ubuntu
  • Unscored —
    CVE-2014-0185

    sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 per…

    php5 Ubuntu
  • Unscored —
    CVE-2010-4150

    Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.…

    php5 Ubuntu