Suse

Linux Enterprise Module For Web Scripting

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2016-4473

Exploit
  • EPSS 23.89%
  • Published 08.06.2017 20:29:00
  • Last modified 20.04.2025 01:37:25

/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.

9.6

CVE-2015-8866

Exploit
  • EPSS 3.05%
  • Published 22.05.2016 01:59:05
  • Last modified 12.04.2025 10:46:40

ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML...