The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0994-1 advisory.

    - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666)
    - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664)
    - CVE-2025-1219: Fixed libxml streams using wrong content-type header when requesting a redirected     resource (bsc#1239667)
    - CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon     (bsc#1239668)
    - CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670)
    - CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1012-1 advisory.

    - CVE-2025-1217: Fixed header parser of `http` stream wrapper not handling folded headers (bsc#1239664)
    - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666)
    - CVE-2025-1219: Fixed libxml streams using wrong `content-type` header when requesting a redirected     resource (bsc#1239667)
    - CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon     (bsc#1239668)
    - CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669)
    - CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670)

    Version update to 8.2.28:
        Core:
            Fixed bug GH-17211 (observer segfault on function loaded with dl()).
        LibXML:
            Fixed GHSA-wg4p-4hqh-c3g9.
            Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a     redirected resource).
        Streams:
            Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header).
            Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes).
            Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon).
            Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers).

    Version update version 8.2.27         Calendar:
            Fixed jdtogregorian overflow.
            Fixed cal_to_jd julian_days argument overflow.
        COM:
            Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
        Core:
            Fail early in *nix configuration build script.
            Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
            Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
            Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
            Fix is_zend_ptr() huge block comparison.
            Fixed potential OOB read in zend_dirname() on Windows.
        Curl:
            Fix various memory leaks in curl mime handling.
        FPM:
            Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
        GD:
            Fixed GH-16776 (imagecreatefromstring overflow).
        GMP:
            Revert gmp_pow() overly restrictive overflow checks.
        Hash:
            Fixed GH-16711: Segfault in mhash().
        Opcache:
            Fixed bug GH-16770 (Tracing JIT type mismatch when returning UNDEF).
            Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads).
            Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64).
        OpenSSL:
            Prevent unexpected array entry conversion when reading key.
            Fix various memory leaks related to openssl exports.
            Fix memory leak in php_openssl_pkey_from_zval().
        PDO:
            Fixed memory leak of `setFetchMode()`.
        Phar:
            Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks).
        PHPDBG:
            Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
        SAPI:
            Fixed bug GH-16998 (UBSAN warning in rfc1867).
        SimpleXML:
            Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element     input).
        SNMP:
            Fixed bug GH-16959 (snmget modifies the object_id array).
        Standard:
            Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties).
        Streams:
            Fixed network connect poll interuption handling.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-922 advisory.

    NOTE:https://github.com/php/php-src/security/advisories/GHSA-     rwp7-7vc6-8477https://www.tenable.com/cve/CVE-2024-11235

    VersionThis vulnerability is present only in PHP 8.3+. The PHP 8.2 and versions before are not impacted.()     (CVE-2024-11235)

    Header parser of `http` stream wrapper does not handle folded headers. (CVE-2025-1217)

    When requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is     used to determine the charset when the requested resource performs a redirect. (CVE-2025-1219)

    Streams HTTP wrapper does not fail for headers with invalid name and no colon. (CVE-2025-1734)

    Stream HTTP wrapper header check might omit basic auth header. (CVE-2025-1736)

    Stream HTTP wrapper truncate redirect location to 1024 bytes (CVE-2025-1861)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??=     operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the     memory layout leading to this, for example by supplying specially crafted inputs to the script, it could     lead to remote code execution. (CVE-2024-11235)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0294 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-8932:
    In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string     inputs to ldap_escape()function on 32-bit systems can cause an integer overflow, resulting in an out-of-     bounds write.

    CVE-2024-11235:
    In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or     ??=operator and exceptions can lead to a use-after-free vulnerability. If the third party can control     the memory layout leading to this, for example by supplying specially crafted inputs to the script, it     could lead to remote code execution.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.3.19. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.19 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8d0acf5a57 advisory.

    **PHP version 8.3.19** (13 Mar 2025)

    **BCMath:**

    * Fixed bug [GH-17398](https://github.com/php/php-src/issues/17398) (bcmul memory leak). (SakiTakamachi)

    **Core:**

    * Fixed bug [GH-17623](https://github.com/php/php-src/issues/17623) (Broken stack overflow detection for     variable compilation). (ilutov)
    * Fixed bug [GH-17618](https://github.com/php/php-src/issues/17618) (UnhandledMatchError does not take     zend.exception_ignore_args=1 into account). (timwolla)
    * Fix fallback paths in fast_long_{add,sub}_function. (nielsdos)
    * Fixed bug [GH-17718](https://github.com/php/php-src/issues/17718) (Calling static methods on an     interface that has `__callStatic` is allowed). (timwolla)
    * Fixed bug [GH-17797](https://github.com/php/php-src/issues/17797) (zend_test_compile_string crash on     invalid script path). (David Carlier)
    * Fixed [GHSA-rwp7-7vc6-8477](https://github.com/php/php-src/security/advisories/GHSA-rwp7-7vc6-8477)     (Reference counting in php_request_shutdown causes Use-After-Free). (**CVE-2024-11235**) (ilutov)

    **DOM:**

    * Fixed bug [GH-17847](https://github.com/php/php-src/issues/17847) (xinclude destroys live node).
    (nielsdos)

    **FFI:**

    * Fix FFI Parsing of Pointer Declaration Lists. (davnotdev)

    **FPM:**

    * Fixed bug [GH-17643](https://github.com/php/php-src/issues/17643) (FPM with httpd ProxyPass encoded     PATH_INFO env). (Jakub Zelenka)

    **GD:**

    * Fixed bug [GH-17772](https://github.com/php/php-src/issues/17772) (imagepalettetotruecolor crash with     memory_limit=2M). (David Carlier)

    **LDAP:**

    * Fixed bug [GH-17704](https://github.com/php/php-src/issues/17704) (ldap_search fails when $attributes     contains a non-packed array with numerical keys). (nielsdos, 7u83)

    **LibXML:**

    * Fixed [GHSA-wg4p-4hqh-c3g9](https://github.com/php/php-src/security/advisories/GHSA-wg4p-4hqh-c3g9)     (Reocurrence of php#72714). (nielsdos)
    * Fixed [GHSA-p3x9-6h7p-cgfc](https://github.com/php/php-src/security/advisories/GHSA-p3x9-6h7p-cgfc)     (libxml streams use wrong `content-type` header when requesting a redirected resource).
    (**CVE-2025-1219**) (timwolla)

    **MBString:**

    * Fixed bug [GH-17503](https://github.com/php/php-src/issues/17503) (Undefined float conversion in     mb_convert_variables). (cmb)

    **Opcache:**

    * Fixed bug [GH-17654](https://github.com/php/php-src/issues/17654) (Multiple classes using same trait     causes function JIT crash). (nielsdos)
    * Fixed bug [GH-17577](https://github.com/php/php-src/issues/17577) (JIT packed type guard crash).
    (nielsdos, Dmitry)
    * Fixed bug [GH-17899](https://github.com/php/php-src/issues/17899) (zend_test_compile_string with invalid     path when opcache is enabled). (David Carlier)
    * Fixed bug [GH-17868](https://github.com/php/php-src/issues/17868) (Cannot allocate memory with tracing     JIT). (nielsdos)

    **PDO_SQLite:**

    * Fixed [GH-17837](https://github.com/php/php-src/issues/17837) ()::getColumnMeta() on unexecuted     statement segfaults). (cmb)
    * Fix cycle leak in sqlite3 setAuthorizer(). (nielsdos)

    **Phar:**

    * Fixed bug [GH-17808](https://github.com/php/php-src/issues/17808): PharFileInfo refcount bug. (nielsdos)

    **PHPDBG:**

    * Partially fixed bug [GH-17387](https://github.com/php/php-src/issues/17387) (Trivial crash in phpdbg     lexer). (nielsdos)
    * Fix memory leak in phpdbg calling registered function. (nielsdos)

    **Reflection:**

    * Fixed bug [GH-15902](https://github.com/php/php-src/issues/15902) (Core dumped in     ext/reflection/php_reflection.c). (DanielEScherzer)

    **Standard:**

    * Fixed bug php#72666 (stat cache clearing inconsistent between file:// paths and plain paths). (Jakub     Zelenka)

    **Streams:**

    * Fixed bug [GH-17650](https://github.com/php/php-src/issues/17650) (realloc with size 0 in     user_filters.c). (nielsdos)
    * Fix memory leak on overflow in _php_stream_scandir(). (nielsdos)
    * Fixed [GHSA-hgf54-96fm-v528](https://github.com/php/php-src/security/advisories/GHSA-hgf54-96fm-v528)     (Stream HTTP wrapper header check might omit basic auth header). (**CVE-2025-1736**) (Jakub Zelenka)
    * Fixed [GHSA-52jp-hrpf-2jff](https://github.com/php/php-src/security/advisories/GHSA-52jp-hrpf-2jff)     (Stream HTTP wrapper truncate redirect location to 1024 bytes). (**CVE-2025-1861**) (Jakub Zelenka)
    * Fixed [GHSA-pcmh-g36c-qc44](https://github.com/php/php-src/security/advisories/GHSA-pcmh-g36c-qc44)     (Streams HTTP wrapper does not fail for headers without colon). (**CVE-2025-1734**) (Jakub Zelenka)
    * Fixed [GHSA-v8xr-gpvj-cx9g](https://github.com/php/php-src/security/advisories/GHSA-v8xr-gpvj-cx9g)     (Header parser of `http` stream wrapper does not handle folded headers). (**CVE-2025-1217**) (Jakub     Zelenka)

    **Zlib:**

    * Fixed bug [GH-17745](https://github.com/php/php-src/issues/17745) (zlib extension incorrectly handles     object arguments). (nielsdos)
    * Fix memory leak when encoding check fails. (nielsdos)
    * Fix zlib support for large files. (nielsdos)




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1026-1 advisory.

    - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666)
    - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664)
    - CVE-2025-1219: Fixed libxml streams using wrong content-type header when requesting a redirected     resource (bsc#1239667)
    - CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon     (bsc#1239668)
    - CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670)
    - CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10557:01 advisory.

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)
      * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)
      * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)
      * php: libxml streams use wrong content-type header when requesting a redirected resource     (CVE-2025-1219)
      * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)
      * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1025-1 advisory.

    - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666)
    - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664)
    - CVE-2025-1219: Fixed libxml streams using wrong content-type header when requesting a redirected     resource (bsc#1239667)
    - CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon     (bsc#1239668)
    - CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670)
    - CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7418 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)

    * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)

    * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)

    * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)

    * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

    * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7418 advisory.

    php     [8.3.19-1]
    - rebase to 8.3.19

    [8.3.15-1]
    - rebase to 8.3.15

    [8.3.12-1]
    - rebase to 8.3.12 RHEL-62189
    - enable command history in phpdbg
    - backport Argon2 password hashing in OpenSSL ext
    - build sockets extension statically
    - switch to nikic/php-parser version 5
    - openssl: always warn about missing curve_name

    [8.2.13-1]
    - rebase to 8.2.13 RHEL-14699
    - add %__phpize and %__phpconfig macros
    - move httpd/nginx wants directives to config files in /etc
    - php-fpm.conf: move include directive after [global] section       following upstream example, allowing overriding
    - use SPDX license IDs

    php-pecl-apcu     php-pecl-redis6     [6.1.0-2]
    - ignore 1 ONLINE test

    [6.1.0-1]
    - RHEL build

    [6.1.0-1]
    - update to 6.1.0
    - drop patch merged upstream

    [6.1.0~RC2-1]
    - update to 6.1.0RC2
    - fix test suite with redis 6.2 using patch from       https://github.com/phpredis/phpredis/pull/2555

    [6.0.2-3]
    - cleanup and modernize spec file

    [6.0.2-2]
    - use valkey on Fedora 41
    - add upstream patch for PHP 8.4

    [6.0.2-1]
    - update to 6.0.2

    [6.0.1-1]
    - update to 6.0.1

    [6.0.0-1]
    - cleanup SCL stuff for Fedora review

    [6.0.0-1]     php-pecl-rrd     php-pecl-xdebug3     [3.3.1-1]
    - update to 3.3.1 for PHP 8.3

    php-pecl-zip

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7489 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)

    * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)

    * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)

    * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)

    * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

    * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7489 advisory.

    [8.3.19-1]
    - rebase to 8.3.19

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:7418 advisory.

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)

    * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)

    * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)

    * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)

    * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

    * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
233313	SUSE SLES15 Security Update : php8 (SUSE-SU-2025:0994-1)	Nessus	SuSE Local Security Checks	2025/3/25	2026/1/21	high
233342	SUSE SLES15 / openSUSE 15 Security Update : php8 (SUSE-SU-2025:1012-1)	Nessus	SuSE Local Security Checks	2025/3/26	2026/1/21	high
233717	Amazon Linux 2023 : php8.3, php8.3-bcmath, php8.3-cli (ALAS2023-2025-922)	Nessus	Amazon Linux Local Security Checks	2025/4/1	2025/4/1	medium
250951	Linux Distros Unpatched Vulnerability : CVE-2024-11235	Nessus	Misc.	2025/8/18	2026/7/31	critical
276031	TencentOS Server 4: php (TSSA-2025:0294)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	critical
232704	PHP 8.3.x < 8.3.19 Multiple Vulnerabilities	Nessus	CGI abuses	2025/3/13	2026/1/21	high
233170	Fedora 41 : php (2025-8d0acf5a57)	Nessus	Fedora Local Security Checks	2025/3/21	2026/1/21	medium
233395	SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2025:1026-1)	Nessus	SuSE Local Security Checks	2025/3/27	2026/6/26	medium
283343	MiracleLinux 9 : php:8.3 (AXSA:2025-10557:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/20	medium
233397	SUSE SLES15 / openSUSE 15 Security Update : php7 (SUSE-SU-2025:1025-1)	Nessus	SuSE Local Security Checks	2025/3/27	2026/1/21	high
235935	RHEL 9 : php:8.3 (RHSA-2025:7418)	Nessus	Red Hat Local Security Checks	2025/5/14	2025/6/5	critical
237203	Oracle Linux 9 : php:8.3 (ELSA-2025-7418)	Nessus	Oracle Linux Local Security Checks	2025/5/23	2026/1/21	medium
237826	RHEL 10 : php (RHSA-2025:7489)	Nessus	Red Hat Local Security Checks	2025/6/5	2025/6/5	critical
240859	Oracle Linux 10 : php (ELSA-2025-7489)	Nessus	Oracle Linux Local Security Checks	2025/6/27	2026/1/21	critical
243161	RockyLinux 9 : php:8.3 (RLSA-2025:7418)	Nessus	Rocky Linux Local Security Checks	2025/7/30	2025/7/30	medium

检测

插件搜索

high

high

medium

critical

critical

high

medium

medium

medium

high

critical

medium

critical

critical

medium