| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-9709 | 5.0 |
The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperl
|
09-11-2022 - 03:04 | 30-03-2015 - 10:59 | |
| CVE-2014-9425 | 7.5 |
Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact
|
04-08-2022 - 15:46 | 31-12-2014 - 02:59 | |
| CVE-2014-9621 | 5.0 |
The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string.
|
16-06-2018 - 01:29 | 21-01-2015 - 18:59 | |
| CVE-2014-9620 | 5.0 |
The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
|
16-06-2018 - 01:29 | 21-01-2015 - 18:59 | |
| CVE-2014-8117 | 5.0 |
softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.
|
05-01-2018 - 02:29 | 17-12-2014 - 19:59 | |
| CVE-2014-8116 | 5.0 |
The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.
|
05-01-2018 - 02:29 | 17-12-2014 - 19:59 | |
| CVE-2015-0232 | 6.8 |
The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) v
|
05-01-2018 - 02:29 | 27-01-2015 - 20:04 | |
| CVE-2014-9427 | 7.5 |
sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins wit
|
31-12-2016 - 02:59 | 03-01-2015 - 02:59 | |
| CVE-2015-0231 | 7.5 |
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call th
|
31-12-2016 - 02:59 | 27-01-2015 - 20:03 |