PHP Security Center

SQL Injection

CVE-2022-31631 php: PDO::quote() may return unquoted string due to an integer overflow

Information Disclosure

CVE-2022-31630 php: OOB read due to insufficient input validation in imageloadfont()

Denial of Service

CVE-2022-31628 php: phar wrapper can produce a denial of service when using quine gzip file

Cross-Site Request Forgery

CVE-2022-31629 php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications

Information Disclosure

CVE-2022-31627 php: heap buffer overflow in finfo_buffer

Remote Code Execution

CVE-2022-31625 php: uninitialized array in pg_query_params() leading to RCE

Remote Code Execution

CVE-2022-31626 php: password of excessive length triggers buffer overflow leading to RCE

Denial of Service

CVE-2021-21708 php: Use after free due to php_filter_float() failing

Information Disclosure

CVE-2021-21707 php: special character breaks path in xml parsing

Privilege Escalation

CVE-2021-21703 php: Local privilege escalation via PHP-FPM