Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PHP 7.2.27, 7.3.14, 7.4.2 Clear all filters
TI-2020-05699 CVE-2020-7060 · GHSA-ch28-9wjf-88gw

global buffer-overflow in mbfl_filt_conv_big5_wchar

Priority MEDIUM 51

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.08888 Published 2020-02-10 Partial fix · 7.2.27, 7.3.14 +1 CWE-125
TI-2020-05698 CVE-2020-7059 · GHSA-q8qf-vj8v-x7r9

OOB read in php_strip_tags_ex

Priority MEDIUM 49

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the all…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.07116 Published 2020-02-10 Partial fix · 7.2.27, 7.3.14 +1 CWE-125