A high-severity vulnerability (CVE-2024-5585) has been identified in multiple versions of PHP, the widely used server-side scripting language
php
The vulnerability, tracked as CVE-2024-4577, could potentially allow unauthenticated attackers to take full control of affected PHP servers
A discovered flaw in the GNU C Library's (glibc) iconv function (CVE-2024-2961) carries severe implications for web applications built on PHP
CVE-2024-1874 (Critical): Improper command-line handling on Windows systems could allow attackers to inject arbitrary commands
CVE-2024-24821 casts a shadow over Composer's reliability, exposing users to potential code execution and privilege escalation threats
CVE-2023-3824 is a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code on a PHP system
CVE-2023-0662 is a remote unauthenticated Denial of Service vulnerability and affects the default/production configuration.