suse / linux_enterprise_module_for_web_scripting CVEs

Beta · best-effort

2 CVEs tagged to suse / linux_enterprise_module_for_web_scripting — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to suse vendor archive

CVE-2016-4473

Published Jun 8, 2017

/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2015-8866

Published May 22, 2016

ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, whi…

CVSS 9.6 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1