Sec Feed Reader

PHP Security (php/php-src GHSA)

Uebersicht

Quellen-ID (source_id): php_sec
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: vendor_advisory
Provider: github_security_advisories
Sprache: de
Zielgruppe: —
Tags: php, runtime
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:18 UTC	2026-10-21 10:18 UTC	0	-	W/"f488e07e282552dd887de47c8155e945bd7df91cb3754dfb4a184091fd610089"	Tue, 06 Oct 2026 20:13:35 GMT

Letzte Eintraege

64 Eintraege · 50 pro Seite · Seite 1 von 2

Veroeffentlicht	Titel	CVEs	Severity
2026-09-24 10:07	Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header	CVE-2025-1861 CVE-2026-93682	MEDIUM
2026-09-24 10:07	OOB read / info leak in convert.* stream filters when line-break-chars contains NUL	CVE-2026-92842	MEDIUM
2026-09-24 10:07	ext/filter: encode 0xFF in FILTER_SANITIZE_ENCODED	—	LOW
2026-09-24 10:06	IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)	CVE-2026-91768	MEDIUM
2026-09-24 10:06	TLS Hostname Verification Falls Back to CN After SAN Mismatch	CVE-2026-91769	MEDIUM
2026-09-24 10:06	Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN	CVE-2026-91767	MEDIUM
2026-09-24 10:06	Various packet overreads in mysqlnd_writeprotocol.c	CVE-2025-1218	LOW
2026-09-24 10:06	Cross-origin credential leak in HTTP stream wrapper redirects	CVE-2018-1000007 CVE-2026-91766	MEDIUM
2026-09-24 10:06	SOAP: Unbounded Recursion in Server-Side cleanup_xml_node	CVE-2026-91765	HIGH
2026-09-24 10:06	Integer overflow to buffer overflow in soap HTTP parsing	CVE-2025-14181	MEDIUM
2026-09-24 10:06	Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection	CVE-2026-6103	MEDIUM
2026-09-24 10:06	PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS	CVE-2026-17545	MEDIUM
2026-07-30 11:03	Stack overflow in phar with circular symlinks	CVE-2026-7260	MEDIUM
2026-07-30 11:03	Out-of-bounds write in bccomp() via crafted operand and scale	CVE-2026-17544	HIGH
2026-07-30 11:02	SQL injection in ext-pgsql via E'...' backslash breakout	CVE-2026-17543	HIGH
2026-07-02 17:01	Failure to setup TLS with a remote server can result in a remote DoS	CVE-2026-12184	HIGH
2026-07-02 16:56	ext/openssl: Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD	CVE-2026-14355	MEDIUM
2026-05-07 12:57	NULL pointer dereference in SOAP apache:Map decoder with missing <value>	CVE-2026-7262	HIGH
2026-05-07 12:57	SoapServer session-persisted object use-after-free via SOAP header fault	CVE-2026-7261	MEDIUM
2026-05-07 12:57	Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()	CVE-2026-7259	LOW
2026-05-07 12:56	XSS within PHP-FPM status endpoint	CVE-2026-6735	HIGH
2026-05-07 12:56	Use-After-Free in SOAP using Apache map with Remote Code Execution	CVE-2026-6722	CRITICAL
2026-05-07 12:56	Out-of-bounds read in urldecode()	CVE-2026-7258	MEDIUM
2026-05-07 12:55	Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding	CVE-2026-6104	HIGH
2026-05-07 12:55	SQL injection in pdo_firebird via NUL bytes in quoted strings	CVE-2025-14179	HIGH
2026-05-07 12:54	Signed integer overflow in metaphone()	CVE-2026-7568	HIGH
2026-05-07 12:54	DoS attack via DOMNode::C14N()	CVE-2026-7263	HIGH
2025-12-18 16:11	Null byte termination in dns_get_record()	—	LOW
2025-12-18 16:10	NULL Pointer Dereference in PDO quoting	CVE-2025-14180	HIGH
2025-12-18 16:10	Heap buffer overflow in array_merge()	CVE-2025-14178	MEDIUM
2025-12-18 16:10	Information Leak of Memory in getimagesize	CVE-2025-14177	MEDIUM
2025-07-03 12:27	pgsql extension does not check for errors during escaping	CVE-2025-1094 CVE-2025-1735	HIGH
2025-07-03 12:27	NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix	CVE-2025-6491	MEDIUM
2025-07-03 12:27	Null byte termination in hostnames	CVE-2025-1220	LOW
2025-03-13 17:44	Reference counting in php_request_shutdown causes Use-After-Free	CVE-2024-11235	CRITICAL
2025-03-13 17:44	Possible out of bounds read when XML_OPTION_SKIP_TAGSTART used	—	LOW
2025-03-13 17:44	libxml streams use wrong `content-type` header when requesting a redirected resource	CVE-2025-1219	MEDIUM
2025-03-13 17:44	Stream HTTP wrapper header check might omit basic auth header	CVE-2025-1736	MEDIUM
2025-03-13 17:44	Stream HTTP wrapper truncate redirect location to 1024 bytes	CVE-2025-1861	MEDIUM
2025-03-13 17:43	Streams HTTP wrapper does not fail for headers with invalid name and no colon	CVE-2025-1734	MEDIUM
2025-03-13 17:43	Header parser of `http` stream wrapper does not handle folded headers	CVE-2025-1217	MEDIUM
2024-11-21 18:15	[Mysqlnd] Leak partial content of the heap through heap buffer over-read	CVE-2024-8929	MEDIUM
2024-11-21 18:15	OOB access in ldap_escape	CVE-2020-1916 CVE-2024-8932	CRITICAL
2024-11-21 18:15	Configuring a proxy in a stream context might allow for CRLF injection in URIs	CVE-2024-11234	MEDIUM
2024-11-21 18:15	Integer overflow in the firebird and dblib quoters causing OOB writes	CVE-2024-11236	CRITICAL
2024-11-21 18:15	Single byte overread with convert.quoted-printable-decode filter	CVE-2024-11233	MEDIUM
2024-11-21 18:15	Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface	—	LOW
2024-09-28 17:37	PHP RCE: A Bypass of CVE-2012-1823, Argument Injection in PHP-CGI	CVE-2012-1823 CVE-2024-4577	CRITICAL
2024-09-27 17:51	cgi.force_redirect configuration is bypassable due to the environment variable collision	CVE-2024-8927	HIGH
2024-09-27 17:50	PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)	CVE-2024-4577 CVE-2024-8926	CRITICAL

Alle Quellen