deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-4024
Published: 2016-05-13
Description: Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an image, which triggers an out-of-bounds heap memory write operation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00076.html; http://www.debian.org/security/2016/dsa-3555; http://www.securityfocus.com/bid/86073
CVE: CVE-2016-4536
Published: 2016-05-13
Description: The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://lists.openafs.org/pipermail/openafs-announce/2016/000496.html; https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17; https://www.openafs.org/pages/security/OPENAFS-SA-2016-002.txt
CVE: CVE-2015-8156
Published: 2016-05-14
Description: Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/90050; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20160506_00; http://www.securityfocus.com/bid/90050
CVE: CVE-2016-1399
Published: 2016-05-14
Description: The packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on Industrial Ethernet 4000 devices and 15.2(2)EB and 15.2(2)EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service (packet data corruption) via crafted IPv4 ICMP packets, aka Bug ID CSCuy13431.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160513-ies; http://www.securityfocus.com/bid/90665; http://www.securitytracker.com/id/1035898
CVE: CVE-2015-8530
Published: 2016-05-14
Description: Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21982035; http://www.securityfocus.com/bid/90524; http://www.securitytracker.com/id/1035867
CVE: CVE-2016-1208
Published: 2016-05-14
Description: The server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source code via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://help.filemaker.com/app/answers/detail/a_id/15364; http://jvn.jp/en/jp/JVN91638315/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000063
CVE: CVE-2016-1209
Published: 2016-05-14
Description: The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN44657371/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000064; http://packetstormsecurity.com/files/137211/WordPress-Ninja-Forms-Unauthenticated-File-Upload.html
CVE: CVE-2016-2015
Published: 2016-05-14
Description: HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1035775; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
CVE: CVE-2016-2016
Published: 2016-05-14
Description: Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user: entries, which allows local users to bypass intended access restrictions by leveraging the configuration of a parent directory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securitytracker.com/id/1035816; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121749; http://www.securitytracker.com/id/1035816
CVE: CVE-2016-1206
Published: 2016-05-14
Description: The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN25674893/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000061; http://www.iodata.jp/support/information/2016/wn-gdnr3_bfa/
CVE: CVE-2016-1207
Published: 2016-05-14
Description: Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier, and WN-G300R3 devices with firmware 1.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN22978346/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000062; http://www.iodata.jp/support/information/2016/wn-g300r_xss/
CVE: CVE-2016-2296
Published: 2016-05-14
Description: Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-254
References: http://seclists.org/fulldisclosure/2016/May/52; https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01; https://www.exploit-db.com/exploits/39822/
CVE: CVE-2016-2297
Published: 2016-05-14
Description: Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."
CVSS Score: 9.4 (CRITICAL)
References: http://seclists.org/fulldisclosure/2016/May/52; https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01; http://seclists.org/fulldisclosure/2016/May/52
CVE: CVE-2016-2298
Published: 2016-05-14
Description: Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2016/May/52; https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01; http://seclists.org/fulldisclosure/2016/May/52
CVE: CVE-2016-4325
Published: 2016-05-14
Description: Lantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which allows remote attackers to obtain root access via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://www.kb.cert.org/vuls/id/785823; http://www.kb.cert.org/vuls/id/785823
CVE: CVE-2016-1660
Published: 2016-05-14
Description: Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html
CVE: CVE-2016-1661
Published: 2016-05-14
Description: Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20
References: http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html
CVE: CVE-2016-1662
Published: 2016-05-14
Description: extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html
CVE: CVE-2016-1663
Published: 2016-05-14
Description: The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.
CVSS Score: 8.8 (HIGH)
References: http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html
CVE: CVE-2016-1664
Published: 2016-05-14
Description: The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254
References: http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html
CVE: CVE-2016-1665
Published: 2016-05-14
Description: The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html
CVE: CVE-2016-1666
Published: 2016-05-14
Description: Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html
CVE: CVE-2016-1667
Published: 2016-05-14
Description: The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html
CVE: CVE-2016-1668
Published: 2016-05-14
Description: The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html
CVE: CVE-2016-1669
Published: 2016-05-14
Description: The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html
CVE: CVE-2016-1670
Published: 2016-05-14
Description: Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362
References: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html
CVE: CVE-2016-1671
Published: 2016-05-14
Description: Google Chrome before 50.0.2661.102 on Android mishandles / (slash) and \ (backslash) characters, which allows attackers to conduct directory traversal attacks via a file: URL, related to net/base/escape.cc and net/base/filename_util.cc.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html; http://www.securityfocus.com/bid/90584; http://www.securitytracker.com/id/1035872
CVE: CVE-2016-0341
Published: 2016-05-15
Description: IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT14835; http://www-01.ibm.com/support/docview.wss?uid=swg21981462; http://www-01.ibm.com/support/docview.wss?uid=swg1IT14835
CVE: CVE-2016-0381
Published: 2016-05-15
Description: IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows remote authenticated users to cause a denial of service (configuration outage) via a non-empty value.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg21981936; http://www.securitytracker.com/id/1035930; http://www-01.ibm.com/support/docview.wss?uid=swg21981936
CVE: CVE-2016-0390
Published: 2016-05-15
Description: Cross-site scripting (XSS) vulnerability in IBM Algorithmics Algo One Algo Risk Application (ARA) 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21981321; http://www-01.ibm.com/support/docview.wss?uid=swg21981321
CVE: CVE-2014-0236
Published: 2016-05-16
Description: file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.
CVSS Score: 7.5 (HIGH)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f3f22ff5c697aef854ffc1918bce708b37481b0f; http://php.net/ChangeLog-5.php; https://bugs.php.net/bug.php?id=67329
CVE: CVE-2015-3152
Published: 2016-05-16
Description: Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html; http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/
CVE: CVE-2015-3411
Published: 2016-05-16
Description: PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\0.xml attack that bypasses an intended configuration in which client users may read only .xml files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html
CVE: CVE-2015-3412
Published: 2016-05-16
Description: PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-254
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html
CVE: CVE-2015-4116
Published: 2016-05-16
Description: Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.
CVSS Score: 9.8 (CRITICAL)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1cbd25ca15383394ffa9ee8601c5de4c0f2f90e1; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html; http://php.net/ChangeLog-5.php
CVE: CVE-2015-4598
Published: 2016-05-16
Description: PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\0.html attack that bypasses an intended configuration in which client users may write to only .html files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html; http://rhn.redhat.com/errata/RHSA-2015-1186.html
CVE: CVE-2015-4599
Published: 2016-05-16
Description: The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.
CVSS Score: 9.8 (CRITICAL)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=51856a76f87ecb24fe1385342be43610fb6c86e4; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html
CVE: CVE-2015-4600
Published: 2016-05-16
Description: The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in the (1) SoapClient::__getLastRequest, (2) SoapClient::__getLastResponse, (3) SoapClient::__getLastRequestHeaders, (4) SoapClient::__getLastResponseHeaders, (5) SoapClient::__getCookies, and (6) SoapClient::__setCookie methods.
CVSS Score: 9.8 (CRITICAL)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0c136a2abd49298b66acb0cad504f0f972f5bfe8; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html
CVE: CVE-2015-4601
Published: 2016-05-16
Description: PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a different issue than CVE-2015-4600.
CVSS Score: 9.8 (CRITICAL)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0c136a2abd49298b66acb0cad504f0f972f5bfe8; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html
CVE: CVE-2015-4602
Published: 2016-05-16
Description: The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.
CVSS Score: 9.8 (CRITICAL)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fb83c76deec58f1fab17c350f04c9f042e5977d1; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html
CVE: CVE-2015-4603
Published: 2016-05-16
Description: The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a "type confusion" issue.
CVSS Score: 9.8 (CRITICAL)
References: http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html; http://rhn.redhat.com/errata/RHSA-2015-1186.html
CVE: CVE-2015-4604
Published: 2016-05-16
Description: The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f938112c495b0d26572435c0be73ac0bfe642ecd; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html
CVE: CVE-2015-4605
Published: 2016-05-16
Description: The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f938112c495b0d26572435c0be73ac0bfe642ecd; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2015-1135.html