Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: PHP — GLSA-202105-23 Clear all filters
TI-2021-04782 CVE-2021-21702 · GHSA-5hg4-wc97-mw4m

Null Dereference in SoapClient

Priority LOW 39

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03152 Published 2021-02-15 Partial fix · 7.3.27, 7.4.15 +1 CWE-476
TI-2020-05710 CVE-2020-7071 · GHSA-grxx-qh3p-vx7g

FILTER_VALIDATE_URL accepts URLs with invalid userinfo

Priority LOW 29

In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02902 Published 2021-02-15 Partial fix · 7.3.26, 7.4.14 +1 CWE-20