Known vulnerabilities in php7.1-cgi (Ubuntu package) 7.1.15-0ubuntu0.17.10.1
Vendor:
Canonical Ltd.
Software:
php7.1-cgi (Ubuntu package)
Version:
7.1.15-0ubuntu0.17.10.1
Software CPE:
cpe:2.3:o:canonical:php7_1-cgi_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Vulnerabilities by Severity
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU12327 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-10547 |
CWE-79 | Low | 7.1.17-0ubuntu0.17.10.1 | 01.05.2018 |
SB2018042612 SB2018050902 SB2018051104 and 13 more |
||
| #VU12258 - Memory corruption CVE-2018-10549 |
CWE-119 | Low | 7.1.17-0ubuntu0.17.10.1 | 26.04.2018 |
SB2018042612 SB2018051111 SB2018051702 and 9 more |
||
| #VU12257 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-10546 |
CWE-835 | Low | 7.1.17-0ubuntu0.17.10.1 | 26.04.2018 |
SB2018042612 SB2018050902 SB2018051104 and 12 more |
||
| #VU12256 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2018-10548 |
CWE-300 | Low | 7.1.17-0ubuntu0.17.10.1 | 26.04.2018 |
SB2018042612 SB2018050902 SB2018051104 and 13 more |
||
| #VU11343 - Exposure of sensitive information to an unauthorized actor CVE-2018-10545 |
CWE-200 | Low | 7.1.17-0ubuntu0.17.10.1 | 29.03.2018 |
SB2018032906 SB2018050902 SB2018051104 and 7 more |