Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11034 State: PUBLISHED Published: 2019-04-18T16:57:00.954964Z Last Updated: 2024-09-17T02:31:25.024Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77753 - https://usn.ubuntu.com/3953-1/ - https://usn.ubuntu.com/3953-2/ - https://security.n
s://bugs.php.net/bug.php?id=77753 - https://usn.ubuntu.com/3953-1/ - https://usn.ubuntu.com/3953-2/ - https://security.netapp.com/advisory/ntap-20190502-0001/ - https://support.f5.com/csp/article/K44590877 - https://lists.debian.org/debian-lts-announce/2019/05/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.
ml - https://access.redhat.com/errata/RHSA-2019:2519 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.org/bugtraq/2019/Sep/38 - https://access.redhat.com/errata/RHSA-2019:3299
CVE ID: CVE-2019-11035 State: PUBLISHED Published: 2019-04-18T16:57:00.996700Z Last Updated: 2024-09-17T03:43:08.668Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77831 - https://usn.ubuntu.com/3953-1/ - https://usn.ubuntu.com/3953-2/ - https://security.net
//bugs.php.net/bug.php?id=77831 - https://usn.ubuntu.com/3953-1/ - https://usn.ubuntu.com/3953-2/ - https://security.netapp.com/advisory/ntap-20190502-0001/ - https://support.f5.com/csp/article/K44590877 - https://lists.debian.org/debian-lts-announce/2019/05/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.or
- https://access.redhat.com/errata/RHSA-2019:2519 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.org/bugtraq/2019/Sep/38 - https://access.redhat.com/errata/RHSA-2019:3299
CVE ID: CVE-2019-11036 State: PUBLISHED Published: 2019-05-03T19:28:15.566170Z Last Updated: 2024-09-16T22:30:46.095Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-126 Description: When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77950 - http://www.securityfocus.com/bid/108177 - https://lists.fedoraproject.org/archives/l
s://bugs.php.net/bug.php?id=77950 - http://www.securityfocus.com/bid/108177 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BY2XUUAN277LS7HKAOGL4DVGAELOJV3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2NFXYNCXZCPYT7ZN4ZLI5EPQQW44FRRO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WN2HLPGEZEF4MFM5YC5FILZB5QEQFP3A/ - https://security.netapp.com/advisory/ntap-20190517-0003/ - https://usn.ubuntu.com/3566-2/ - https://lists.debian.org/debian-lts-announce/2019/05/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/m
ts.debian.org/debian-lts-announce/2019/05/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html - https://usn.ubuntu.com/4009-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://seclists.org/bugtraq/2019/Sep/35 - https://www.debian.org/security/2019/dsa-4527 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.org/bugtraq/2019/Sep/38 - https://access.redhat.com/errata/RHSA-2019:3299
CVE ID: CVE-2019-11037 State: PUBLISHED Published: 2019-05-03T19:28:15.611639Z Last Updated: 2024-09-16T17:43:40.554Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: PHP Group Products: PHP Imagick extension Problem Types: CWE-787 Description: In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled by untrusted party. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77791
untrusted party. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77791 - http://www.securityfocus.com/bid/108292 - https://github.com/CVEProject/cvelist/pull/1964 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MQ7WJA25YF2R2LRALK4QEYWUHHJPSUD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BU66V7QJKD32RXLY5J7Z5NZH4V3VV524/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FME5ZG7DDYWUPPHTTAFJB5OFFCPXYHPS/ - https://www.debian.org/security/2019/dsa-4576 - https://seclists.org/bugtraq/2019/Nov/3
5ZG7DDYWUPPHTTAFJB5OFFCPXYHPS/ - https://www.debian.org/security/2019/dsa-4576 - https://seclists.org/bugtraq/2019/Nov/39 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00016.html - https://security.gentoo.org/glsa/202003-38 - https://usn.ubuntu.com/4586-1/
CVE ID: CVE-2019-11038 State: PUBLISHED Published: 2019-06-18T23:28:28.236592Z Last Updated: 2024-09-16T21:04:15.889Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-457 Description: When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code. Additional Analyst Notes: - CVE Program Cont
disclosing contents of the stack that has been left there by previous code. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PKSSWFR2WPMUOIB5EN5ZM252NNEPYUTG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WAZBVK6XNYEIN7RDQXESSD63QHXPLKWL/ - https://lists.debian.org/debian-lts-announce/2019/06/msg00003.html - https://bugs.php.net/bug.php?id=77973 - https://github.com/libgd/libgd/issues/501 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821 - https://bugzilla.suse.com/show_bug.cgi?id=1140118 - https://bugzilla.suse.com/sho
org/cgi-bin/bugreport.cgi?bug=929821 - https://bugzilla.suse.com/show_bug.cgi?id=1140118 - https://bugzilla.suse.com/show_bug.cgi?id=1140120 - https://bugzilla.redhat.com/show_bug.cgi?id=1724149 - https://bugzilla.redhat.com/show_bug.cgi?id=1724432 - https://access.redhat.com/errata/RHSA-2019:2519 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.org/bugtraq/2019/Sep/38 - https://access.redhat.com/errata/RHSA-2019:3299 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/ - https://usn.ubuntu.com/4316-2/ - https://usn.ubu
e%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/ - https://usn.ubuntu.com/4316-2/ - https://usn.ubuntu.com/4316-1/
CVE ID: CVE-2019-11039 State: PUBLISHED Published: 2019-06-18T23:28:28.280109Z Last Updated: 2024-09-17T00:21:46.316Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78069 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html - https://acce
ugs.php.net/bug.php?id=78069 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://seclists.org/bugtraq/2019/Sep/35 - https://www.debian.org/security/2019/dsa-4527 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.org/bugtraq/2019/Sep/38 - https://access.redhat.com/errata/RHSA-2019:3299
CVE ID: CVE-2019-11040 State: PUBLISHED Published: 2019-06-18T23:28:28.320225Z Last Updated: 2024-09-16T17:23:01.910Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77988 - http://lists.
. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77988 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html - https://access.redhat.com/errata/RHSA-2019:2519 - https://seclists.org/bugtraq/2019/Sep/35 - https://www.debian.org/security/2019/dsa-4527 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.org/bugtraq/2019/Sep/38 - https://access.redhat.com/errata/RHSA-2019:3299
CVE ID: CVE-2019-11041 State: PUBLISHED Published: 2019-08-09T19:26:34.152284Z Last Updated: 2024-09-16T19:31:07.181Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78222 - https://lists
. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78222 - https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html - https://usn.ubuntu.com/4097-2/ - https://usn.ubuntu.com/4097-1/ - https://security.netapp.com/advisory/ntap-20190822-0003/ - https://seclists.org/bugtraq/2019/Sep/35 - https://www.debian.org/security/2019/dsa-4527 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.org/bugtraq/2019/Sep/38 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html - https://support.apple.com/kb/HT210634 - https://seclists.org/bugtraq/2019/Oct/9 - http://seclists.org/fulldisclosure/2019/Oct/15 - https://s
e.com/kb/HT210634 - https://seclists.org/bugtraq/2019/Oct/9 - http://seclists.org/fulldisclosure/2019/Oct/15 - https://support.apple.com/kb/HT210722 - http://seclists.org/fulldisclosure/2019/Oct/55 - https://access.redhat.com/errata/RHSA-2019:3299 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2019-11042 State: PUBLISHED Published: 2019-08-09T19:26:34.193473Z Last Updated: 2024-09-17T02:15:56.650Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78256 - https://lists
. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78256 - https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html - https://usn.ubuntu.com/4097-2/ - https://usn.ubuntu.com/4097-1/ - https://security.netapp.com/advisory/ntap-20190822-0003/ - https://seclists.org/bugtraq/2019/Sep/35 - https://www.debian.org/security/2019/dsa-4527 - https://www.debian.org/security/2019/dsa-4529 - https://seclists.org/bugtraq/2019/Sep/38 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html - https://support.apple.com/kb/HT210634 - https://seclists.org/bugtraq/2019/Oct/9 - http://seclists.org/fulldisclosure/2019/Oct/15 - https://s
CVE ID: CVE-2019-11043 State: PUBLISHED Published: 2019-10-28T14:19:04.252Z Last Updated: 2025-10-21T23:45:28.408Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: PHP Products: PHP Problem Types: CWE-120 Description: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/neex/phuip-fpizdam - https://bugs.php.net/bug.php?id=78
ainer: - CISA ADP Vulnrichment: References: - https://github.com/neex/phuip-fpizdam - https://bugs.php.net/bug.php?id=78599 - https://usn.ubuntu.com/4166-1/ - https://www.debian.org/security/2019/dsa-4552 - https://www.debian.org/security/2019/dsa-4553 - https://usn.ubuntu.com/4166-2/ - https://support.f5.com/csp/article/K75408500?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T62LF4ZWVV7OMMIZFO6IFO5QLZKK7YRD/ - https://security.netapp.com/advisory/ntap-20191031-0003/ - https://access.redhat.com/errata/RHSA-2019:3286 - https://access.redhat.com/errata/RHSA-2019:3287 - https://access.redhat.com/errat
ess.redhat.com/errata/RHSA-2019:3286 - https://access.redhat.com/errata/RHSA-2019:3287 - https://access.redhat.com/errata/RHSA-2019:3299 - https://access.redhat.com/errata/RHSA-2019:3300 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W23TP6X4H7LB645FYZLUPNIRD5W3EPU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FSNBUSPKMLUHHOADROKNG5GDWDCRHT5M/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00011.html - https://access.redhat.com/errata/RHSA-2019:3724 - https://access.redhat.com/errata/RHSA-2019:3735 - https://access.redhat.com/errata/RHSA-2019:3736 - https://www.synolo
- https://access.redhat.com/errata/RHSA-2019:3735 - https://access.redhat.com/errata/RHSA-2019:3736 - https://www.synology.com/security/advisory/Synology_SA_19_36 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00014.html - https://support.apple.com/kb/HT210919 - https://seclists.org/bugtraq/2020/Jan/44 - http://seclists.org/fulldisclosure/2020/Jan/40 - https://access.redhat.com/errata/RHSA-2020:0322 - http://packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-Execution.html - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2019-11044 State: PUBLISHED Published: 2019-12-23T02:40:16.742266Z Last Updated: 2024-09-17T01:47:06.457Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-170 Description: In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78862 - https://security.netapp.com/advisory/nt
: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78862 - https://security.netapp.com/advisory/ntap-20200103-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/ - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2019-11045 State: PUBLISHED Published: 2019-12-23T02:40:17.130519Z Last Updated: 2024-09-16T17:32:41.178Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-170 Description: In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78863 - https://lists.debian.org/debian-lts-announ
CVE Program Container: References: - https://bugs.php.net/bug.php?id=78863 - https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html - https://security.netapp.com/advisory/ntap-20200103-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/ - https://usn.ubuntu.com/4239-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html - https://seclists.org/bugtraq/2020/Feb/27 - https://www.debian.org/security/2020/dsa-4626 - https://www.debian.org/secu
- https://seclists.org/bugtraq/2020/Feb/27 - https://www.debian.org/security/2020/dsa-4626 - https://www.debian.org/security/2020/dsa-4628 - https://seclists.org/bugtraq/2020/Feb/31 - https://seclists.org/bugtraq/2021/Jan/3 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2019-11046 State: PUBLISHED Published: 2019-12-23T02:40:17.526779Z Last Updated: 2024-09-16T17:52:45.661Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can read to disclosure of the content of some memory locations. Additional Analyst Notes: - CVE Program Container: References: - http
isclosure of the content of some memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78878 - https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html - https://security.netapp.com/advisory/ntap-20200103-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/ - https://support.f5.com/csp/article/K48866433?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4239-1/ - http://lists.opensuse.org/op
icle/K48866433?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4239-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html - https://seclists.org/bugtraq/2020/Feb/27 - https://www.debian.org/security/2020/dsa-4626 - https://www.debian.org/security/2020/dsa-4628 - https://seclists.org/bugtraq/2020/Feb/31 - https://seclists.org/bugtraq/2021/Jan/3 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2019-11047 State: PUBLISHED Published: 2019-12-23T02:40:17.978353Z Last Updated: 2024-09-17T04:24:19.473Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78910 - https://lists.debian.org/
Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=78910 - https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html - https://security.netapp.com/advisory/ntap-20200103-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/ - https://usn.ubuntu.com/4239-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html - https://seclists.org/bugtraq/2020/Feb/27 - https://www.debian.org/security/2020/dsa-4626 - https://ww
01/msg00036.html - https://seclists.org/bugtraq/2020/Feb/27 - https://www.debian.org/security/2020/dsa-4626 - https://www.debian.org/security/2020/dsa-4628 - https://seclists.org/bugtraq/2020/Feb/31 - https://seclists.org/bugtraq/2021/Jan/3 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2019-11048 State: PUBLISHED Published: 2020-05-20T07:15:15.636918Z Last Updated: 2024-09-16T18:13:31.009Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-400, CWE-190 Description: In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting th