Suse Linux Enterprise Module For Web Scripting vulnerabilities

2 vulnerabilities

Known vulnerabilities in Suse Linux Enterprise Module For Web Scripting, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2016-4473php +4 more9y agophp php/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.CVSS9.8CriticalEPSS7.75%PrioritiseCVE-2015-8866canonical · ubuntu_linux +6 more10y agocanonical ubuntu_linuxext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161.CVSS9.6CriticalEPSS4.17%