HV
Product
Hiphop Virtual Machine
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch
Add Hiphop Virtual Machine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3570 | 9.8 | Jul 18 | Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p) Affected: through 3.30.5; 4.0.0 through 4.0.4; 4.1.0; 4.2.0; 4.3.0; 4.4.0; +4 more |
| CVE-2014-9714 | – | Apr 13 | Cross-site scripting (XSS) vulnerability in the WddxPacket::recursiveAddVar function in HHVM (aka the HipHop Virtual Machine) before 3.5.0 allows remote attackers to inject… Affected: through 3.4.2 |
| CVE-2014-6229 | – | Dec 28 | The HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 incorrectly expects that a certain key string uses '\0' for… Affected: through 3.2.0 |
| CVE-2014-6228 | – | Dec 28 | Integer overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 allows remote attackers to cause a… Affected: through 3.2.0 |
| CVE-2014-5386 | – | Dec 28 | The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed the random number generator, which… Affected: through 3.2.0 |
| CVE-2014-2209 | – | Dec 28 | Facebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/util/light-process.cpp, which allows… Affected: through 3.0.1 |
| CVE-2014-2208 | – | Dec 28 | CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine (HHVM) before 2.4.2 allows remote… Affected: through 2.4.1 |
Showing 7