php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

« Show Previous 30 Entries Showing 31-60 of 1337 Show Next 30 Entries »
Bugs for *General Issues
ID# Date Last Modified Type Status PHP Version OS Summary Assigned
72434
(edit)		 2016-06-16 14:41 UTC 2016-06-23 12:51 UTC Sec Bug Closed 5.5.36 * ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unseria dmitry
72663
(edit)		 2016-07-24 02:09 UTC 2016-09-05 15:28 UTC Sec Bug Closed 5.6.24   Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization stas
72731
(edit)		 2016-08-02 11:27 UTC 2017-01-16 13:29 UTC Sec Bug Closed 5.6.24   Type Confusion in Object Deserialization nikic
72978
(edit)		 2016-08-30 15:56 UTC 2016-12-13 11:52 UTC Sec Bug Closed 7.0.10   Use After Free in PHP7 unserialize() stas
73052
(edit)		 2016-09-09 03:07 UTC 2016-09-16 13:36 UTC Sec Bug Closed 5.6.25   Memory Corruption in During Deserialized-object Destruction stas
73091
(edit)		 2016-09-15 15:20 UTC 2016-10-11 23:51 UTC Sec Bug Closed 7.0.11   Unserializing DateInterval object may lead to __toString invocation stas
73092
(edit)		 2016-09-15 15:24 UTC 2017-01-16 11:47 UTC Sec Bug Closed 7.1.0RC1   Unserialize use-after-free when resizing object's properties hash table nikic
73147
(edit)		 2016-09-23 13:22 UTC 2016-11-02 09:25 UTC Sec Bug Closed 5.6.26   Use After Free in unserialize() stas
73367
(edit)		 2016-10-21 15:52 UTC 2017-01-16 11:36 UTC Sec Bug Closed 5.6.27   Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization nikic
73722
(edit)		 2016-12-12 11:29 UTC 2017-02-13 01:57 UTC Sec Bug Closed 7.1.0   Files blocked as potential virus by AVG stas
73832
(edit)		 2016-12-29 15:03 UTC 2017-01-20 19:18 UTC Sec Bug Closed 7.0.14 Arch Linux Use of uninitialized memory in unserialize() stas
73891
(edit)		 2017-01-08 21:20 UTC 2017-01-10 00:19 UTC Sec Bug Closed 7.1.0 BSD open_basedir bypass through glob:// protocol pollita
74194
(edit)		 2017-03-02 07:55 UTC 2017-08-12 19:01 UTC Sec Bug Closed 7.1Git-2017-03-02 (Git) Test on Ubuntu 16.04 x64 a heap-buffer-overflow when serializing ArrayObject nikic
74614
(edit)		 2017-05-18 15:22 UTC 2017-07-04 19:33 UTC Sec Bug Closed 7.0.20 * Use-after-free in PHP7's unserialize() stas
76459
(edit)		 2018-06-11 22:51 UTC 2018-08-15 13:54 UTC Sec Bug Closed 7.2.6 Windows windows linkinfo lacks openbasedir check ab
5311
(edit)		 2000-07-01 16:36 UTC 2010-03-18 16:34 UTC Req Closed 4.0.1 W2000 implement checkdnsrr() and getmxrr() on windows kalle
6927
(edit)		 2000-09-28 22:17 UTC 2015-08-28 21:11 UTC Req Closed 4.0.2   Ability to disable assert() for releases nikic
7006
(edit)		 2000-10-04 02:52 UTC 2013-05-29 09:14 UTC Req Closed 4.0.2 Linux 2.4.0-test7 preg_replace ( string pattern, array replacement, string subject ); maarten
8427
(edit)		 2000-12-26 13:31 UTC 2010-12-01 15:54 UTC Req Closed 4.0.4 Any Unwanted references jani
9262
(edit)		 2001-02-14 10:09 UTC 2010-12-01 16:02 UTC Req Closed 4.0.4pl1 windows 98 Inconsistency in the implementation of here-docs jani
9654
(edit)		 2001-03-09 09:57 UTC 2012-08-10 18:48 UTC Req Closed * * Add is_type() function nikic
9777
(edit)		 2001-03-16 00:53 UTC 2010-12-16 17:39 UTC Req Closed 4.0.4pl1   Function/Class prototypes? yohgaki
10102
(edit)		 2001-04-01 19:05 UTC 2010-12-01 16:04 UTC Req Closed 4CVS, 5CVS (2004-04-13) * need a better error message when argument to empty() isn't a variable jani
10217
(edit)		 2001-04-06 19:39 UTC 2010-08-25 16:08 UTC Req Closed 4.0.4pl1 linux 2.2.16 Feature shiflett
10519
(edit)		 2001-04-26 21:35 UTC 2010-11-24 09:33 UTC Req Closed 4.0.4pl1 Win98 $HTTP_COOKIE_VARS spoofing jani
10524
(edit)		 2001-04-27 09:23 UTC 2010-11-24 13:29 UTC Req Closed 4.0 Latest CVS (27/04/2001) Linux 2.2.19 register_shutdown_function request jani
11063
(edit)		 2001-05-23 16:35 UTC 2012-04-11 12:08 UTC Req Closed 4.0.4pl1 Windows NT 4.0 Build 1381 $var = function_returning_array(args)[0]; doesn't work nikic
11549
(edit)		 2001-06-19 03:35 UTC 2010-12-31 20:21 UTC Req Closed 4.0.5 Any open_basedir/include_path security improvement jani
11596
(edit)		 2001-06-20 21:36 UTC 2010-11-19 00:38 UTC Req Closed 4.0.5 any More ways of passing by refrence jani
11836
(edit)		 2001-07-02 09:39 UTC 2015-09-07 17:56 UTC Req Closed 4.0.4pl1 ms nt 4 Require nor Include works inner a class file cmb
« Show Previous 30 Entries Showing 31-60 of 1337 Show Next 30 Entries »
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Sat Jun 21 22:01:32 2025 UTC