Cryptography

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Filter bypass in filter_var (FILTER_VALIDATE_URL)CVE-2024-5458PHP Group · CVSS 5.3 · 12% likely

   CWE-345

2. The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were…CVE-2010-1128Php · 8.1% likely

   CWE-310

3. crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it…CVE-2011-2483Php · 5.0% likely

   CWE-310

4. The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RAND_pseu…CVE-2015-8867Php · 4.4% likely

   CWE-310

5. The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conver…CVE-2008-2108Php · 4.3% likely

   CWE-331

6. The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass…CVE-2011-3189Php · 4.2% likely

   CWE-310

7. password_verify() always returns true for some invalid hashesCVE-2023-0567PHP Group · CVSS 7.7 · 0.9% likely

   CWE-916

8. TLS Hostname Verification Falls Back to CN After SAN MismatchCVE-2026-91769PHP Group · CVSS 4.3 · 0.2% likely

   CWE-297

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.