Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: PHP — DSA-5179 Clear all filters
TI-2022-13550 CVE-2022-31626 · GHSA-jfc6-9gw3-fhfg

mysqlnd/pdo password buffer overflow

Priority HIGH 72

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection,…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.58123 Published 2022-06-16 Fixed in 7.4.30, 8.0.20 +1 CWE-120
TI-2022-13549 CVE-2022-31625 · GHSA-wg63-8xjw-5wvx

Freeing unallocated memory in php_pgsql_free_params()

Priority MEDIUM 42

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory usin…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0379 Published 2022-06-16 Fixed in 7.4.30, 8.0.20 +1 CWE-590