Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PHP 7.3.29, 7.4.21, 8.0.8 Clear all filters
TI-2021-04785 CVE-2021-21705 · GHSA-rxcr-7xjm-f9c9

Incorrect URL validation in FILTER_VALIDATE_URL

Priority LOW 28

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can b…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02091 Published 2021-10-04 Partial fix · 7.3.29, 7.4.21 +1 CWE-20
TI-2021-04784 CVE-2021-21704 · GHSA-q773-v75g-5rqg

Multiple vulnerabilities in Firebird client extension

Priority LOW 30

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01796 Published 2021-10-04 Fixed in 7.3.29, 7.4.21 +1 CWE-125