Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: PHP — openSUSE-SU-2020:0642 Clear all filters
TI-2020-05705 CVE-2020-7066 · GHSA-g2jm-56j8-g3cg

get_headers() silently truncates after a null byte

Priority LOW 29

In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02659 Published 2020-04-01 Partial fix CWE-170
TI-2020-05703 CVE-2020-7064 · GHSA-rw73-mxr4-6595

Use-of-uninitialized-value in exif

Priority LOW 36

In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.04295 Published 2020-04-01 Partial fix · 7.3.16, 7.4.4 +1 CWE-125