Most recent entries from all

bdu:2016-00308

Withdrawn: BELL-CVE-2015-6836 — CVE-2015-6836 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2015-avi-387 — De multiples vulnérabilités ont été corrigées dans PHP. Elles permettent à un attaquant de…

certfr-2015-avi-387

cnvd-2015-06102

EUVD-2026-94551

fkie_cve-2015-6836

The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a "type confusion" in the serialize_function_call function.

GHSA-g2mm-7jgw-995g

gsd-2015-6836

RHSA-2016:0457 — Red Hat Security Advisory: rh-php56-php security update

php: segmentation fault in Phar::convertToData on invalid file php: buffer overflow and stack smashing error in phar_fix_filepath php: Use After Free Vulnerability in unserialize() php: dangling pointer in the unserialization of ArrayObject items php: Files from archive can be extracted outside of destination directory using phar php: multiple unserialization use-after-free issues php: use-after-free vulnerability in session deserializer php: SOAP serialize_function_call() type confusion php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in phar_get_fp_offset() php: uninitialized pointer in phar_make_dirstream()

SUSE-SU-2015:1633-1 — Security update for php5

Security update for php5

UBUNTU-CVE-2015-6836

Affected: Ubuntu:14.04:LTS: php5

WID-SEC-W-2025-1425 — PHP: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Code mit den Rechten des Dienstes auszuführen, um einen Denial of Service Zustand hervorrufen oder um Informationen offenzulegen.