Linux Enterprise Module For Web Scripting (Suse) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2017-06-08. Vendor: Suse.

CVEs of Linux Enterprise Module For Web Scripting

• CVE-2016-4473 - CVSS 9.8 (critical), 2017-06-08: /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to…
• CVE-2015-8866 - CVSS 9.6 (critical), 2016-05-22: ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes…