| Max CVSS | 5.1 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-4721 | 2.6 |
The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which might allow context-dependent
|
19-01-2023 - 16:14 | 06-07-2014 - 23:55 | |
| CVE-2014-0237 | 5.0 |
The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.
|
19-01-2023 - 15:44 | 01-06-2014 - 04:29 | |
| CVE-2013-6712 | 5.0 |
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted inte
|
31-10-2022 - 15:01 | 28-11-2013 - 04:37 | |
| CVE-2014-1943 | 5.0 |
Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.
|
31-10-2022 - 15:00 | 18-02-2014 - 19:55 | |
| CVE-2014-0238 | 5.0 |
The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero len
|
31-10-2022 - 14:54 | 01-06-2014 - 04:29 | |
| CVE-2014-3479 | 4.3 |
The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (appli
|
28-10-2022 - 23:26 | 09-07-2014 - 11:07 | |
| CVE-2014-3480 | 4.3 |
The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (appli
|
28-10-2022 - 23:25 | 09-07-2014 - 11:07 | |
| CVE-2014-2270 | 4.3 |
softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.
|
28-10-2022 - 23:23 | 14-03-2014 - 15:55 | |
| CVE-2014-4049 | 5.1 |
Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns
|
29-08-2022 - 20:05 | 18-06-2014 - 19:55 | |
| CVE-2012-1571 | 4.3 |
file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
|
08-03-2014 - 04:55 | 17-07-2012 - 21:55 |