risu 1.8.3 → 1.8.4

data/lib/risu/parsers/nessus/postprocess/mongo_db.rb

@@ -0,0 +1,46 @@
+# Copyright (c) 2010-2020 Jacob Hammack.
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+# THE SOFTWARE.
+
+
+module Risu
+	module Parsers
+		module Nessus
+			module PostProcess
+				class MongoDBRollup < Risu::Base::PostProcessBase
+
+					#
+					def initialize
+						@info =
+						{
+							:description => "MongoDB Patch Rollup",
+							:plugin_id => -99943,
+							:plugin_name => "Missing the latest MongoDB",
+							:item_name => "Update to the latest MongoDB",
+							:plugin_ids => [
+122243, #MongoDB 2.6.x < 2.6.9, 3.0.x < 3.0.14, 3.2.x < 3.2.8 mongod
+
+							]
+						}
+					end
+				end
+			end
+		end
+	end
+end

data/lib/risu/parsers/nessus/postprocess/mozzila_thunderbird.rb

@@ -0,0 +1,49 @@
+# Copyright (c) 2010-2020 Jacob Hammack.
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+# THE SOFTWARE.
+
+
+module Risu
+	module Parsers
+		module Nessus
+			module PostProcess
+				class MozzilaThunderbirdPatchRollup < Risu::Base::PostProcessBase
+
+					#
+					def initialize
+						@info =
+						{
+							:description => "Mozzila Thunderbird Patch Rollup",
+							:plugin_id => -99949,
+							:plugin_name => "Missing the latest Mozzila Thunderbird Patches",
+							:item_name => "Update to the latest Mozzila Thunderbird",
+							:plugin_ids => [
+								105507, #Mozilla Thunderbird < 52.5.2 Multiple Vulnerabilities
+								108519, #Mozilla Thunderbird < 52.6 Multiple Vulnerabilities
+								109946, #Mozilla Thunderbird < 52.8 Multiple Vulnerabilities (EFAIL)
+								105044, #Mozilla Thunderbird < 52.5 Multiple Vulnerabilities
+								111044, #Mozilla Thunderbird < 52.9 Multiple Vulnerabilities
+							]
+						}
+					end
+				end
+			end
+		end
+	end
+end

data/lib/risu/parsers/nessus/postprocess/normalize_plugin_names.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -43,7 +43,10 @@ module Risu
 							"(FREAK)",
 							"(Bar Mitzvah)",
 							"(Logjam)",
-							"(uncredentialed check)"
+							"(uncredentialed check)",
+							"(EXPLODINGCAN)",
+							"(Foreshadow)",
+							"(MSXML)"
 						]
 					end
 

data/lib/risu/parsers/nessus/postprocess/openoffice.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,18 +31,21 @@ module Risu
 						{
 							:description => "OpenOffice Patch Rollup",
 							:plugin_id => -99963,
-							:plugin_name => "Update to the latest OpenOffice",
+							:plugin_name => "Missing the latest OpenOffice Patches",
 							:item_name => "Update to the latest OpenOffice",
 							:plugin_ids => [
-								25954,
-								39563,
-								77408,
-								86904,
-								94199,
-								
-
-
-
+								77408, #Apache OpenOffice < 4.1.1 Multiple Vulnerabilities
+								86904, #Apache OpenOffice < 4.1.2 Multiple Vulnerabilities
+								94199, #Apache OpenOffice < 4.1.3 Multiple Vulnerabilities
+								61731, #Apache OpenOffice < 3.4.1 Multiple Heap-Based Buffer Overflows
+								69185, #Apache OpenOffice < 4.0 Multiple Memory Corruption Vulnerabilities
+								51773, #Oracle OpenOffice.org < 3.3 Multiple Vulnerabilities
+								58727, #OpenOffice XML External Entity RDF Document Handling Information Disclosure 59191, #Apache OpenOffice < 3.4.0 Multiple Memory Corruption Vulnerabilities
+								59191, #Apache OpenOffice < 3.4.0 Multiple Memory Corruption Vulnerabilities
+								104351, #Apache OpenOffice < 4.1.4 Multiple Vulnerabilities
+								40826, #OpenOffice < 3.1.1 Multiple Buffer Overflows
+44597, #Sun OpenOffice.org < 3.2 Multiple Vulnerabilities
+46814, #Oracle OpenOffice.org < 3.2.1 Multiple Vulnerabilities
 							]
 						}
 					end

data/lib/risu/parsers/nessus/postprocess/openssh.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,7 +31,7 @@ module Risu
 						{
 							:description => "OpenSSH Patch Rollup",
 							:plugin_id => -99995,
-							:plugin_name => "Update to the latest OpenSSH",
+							:plugin_name => "Missing the latest OpenSSH Patches",
 							:item_name => "Update to the latest OpenSSH",
 							:plugin_ids => [
 								11837,
@@ -59,7 +59,7 @@ module Risu
 								11712,
 								44072,
 								10802,
-								
+
 
 
 

data/lib/risu/parsers/nessus/postprocess/openssl.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,46 +31,65 @@ module Risu
 						{
 							:description => "OpenSSL Patch Rollup",
 							:plugin_id => -99984,
-							:plugin_name => "Update to the latest OpenSSL",
+							:plugin_name => "Missing the latest OpenSSL Patches",
 							:item_name => "Update to the latest OpenSSL",
 							:plugin_ids => [
-								11267,
-								12110,
-								74363,
-								77086,
-								74326,
-								73412,
-								77200,
-								17757,
-								73404,
-								74364,
-								77088,
-								17755,
-								17756,
-								17758,
-								17759,
-								17761,
-								17762,
-								17763,
-								17765,
-								57459,
-								58799,
-								17760,
-								56996,
-								58564,
-								59076,
-								64532,
-								71857,
-								78554,
-								80568,
-								82032,
-								84153,
-								51892,
-								17766,
-								17767,
-								
-
-
+								11267, #OpenSSL < 0.9.6j / 0.9.7b Multiple Vulnerabilities
+								12110, #OpenSSL < 0.9.6m / 0.9.7d Multiple Remote DoS
+								74363, #OpenSSL 0.9.8 < 0.9.8za Multiple Vulnerabilities
+								77086, #OpenSSL 0.9.8 < 0.9.8zb Multiple Vulnerabilities
+								74326, #OpenSSL 'ChangeCipherSpec' MiTM Potential Vulnerability
+								73412, #OpenSSL Heartbeat Information Disclosure (Heartbleed)
+								77200, #OpenSSL 'ChangeCipherSpec' MiTM Vulnerability
+								17757, #OpenSSL < 0.9.7l / 0.9.8d Multiple Vulnerabilities
+								73404, #OpenSSL 1.0.1 < 1.0.1g Multiple Vulnerabilities (Heartbleed)
+								74364, #OpenSSL 1.0.1 < 1.0.1h Multiple Vulnerabilities
+								77088, #OpenSSL 1.0.1 < 1.0.1i Multiple Vulnerabilities
+								17755, #OpenSSL < 0.9.7h / 0.9.8a Protocol Version Rollback
+								17756, #OpenSSL < 0.9.7k / 0.9.8c PKCS Padding RSA Signature Forgery Vulnerability
+								17758, #OpenSSL < 0.9.7m / 0.9.8e Buffer Overflow (deprecated)
+								17759, #OpenSSL < 0.9.8 Weak Default Configuration
+								17761, #OpenSSL < 0.9.8i Denial of Service
+								17762, #OpenSSL < 0.9.8j Signature Spoofing
+								17763, #OpenSSL < 0.9.8k Multiple Vulnerabilities
+								17765, #OpenSSL < 0.9.8l Multiple Vulnerabilities
+								57459, #OpenSSL < 0.9.8s Multiple Vulnerabilities
+								58799, #OpenSSL < 0.9.8w ASN.1 asn1_d2i_read_bio Memory Corruption
+								17760, #OpenSSL < 0.9.8f Multiple Vulnerabilities
+								56996, #OpenSSL < 0.9.8h Multiple Vulnerabilities
+								58564, #OpenSSL < 0.9.8u Multiple Vulnerabilities
+								59076, #OpenSSL 0.9.8 < 0.9.8x DTLS CBC Denial of Service
+								64532, #OpenSSL < 0.9.8y Multiple Vulnerabilities
+								71857, #OpenSSL 1.0.1 < 1.0.1f Multiple Vulnerabilities
+								78554, #OpenSSL 1.0.1 < 1.0.1j Multiple Vulnerabilities (POODLE)
+								80568, #OpenSSL 1.0.1 < 1.0.1k Multiple Vulnerabilities (FREAK)
+								82032, #OpenSSL 1.0.1 < 1.0.1m Multiple Vulnerabilities
+								84153, #OpenSSL 1.0.1 < 1.0.1n Multiple Vulnerabilities (Logjam)
+								51892, #OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG Session Resume Ciphersuite Downgrade Issue
+								17766, #OpenSSL < 0.9.8p / 1.0.0b Buffer Overflow
+								17767, #OpenSSL < 0.9.8p / 1.0.0e Double Free Vulnerability
+								90888, #OpenSSL 1.0.1 < 1.0.1o ASN.1 Encoder Negative Zero Value Handling RCE -
+								93814, #OpenSSL 1.0.1 < 1.0.1u Multiple Vulnerabilities
+								89081, #OpenSSL 1.0.1 < 1.0.1s Multiple Vulnerabilities (DROWN)
+								84636, #OpenSSL 1.0.1 < 1.0.1p Multiple Vulnerabilities -
+								87221, #OpenSSL 1.0.1 < 1.0.1q Multiple DoS -
+								88529, #OpenSSL 1.0.1 < 1.0.1r Multiple Vulnerabilities -
+								90890, #OpenSSL 1.0.1 < 1.0.1t Multiple Vulnerabilities -
+								93112, #OpenSSL < 1.1.0 Default Weak 64-bit Block Cipher
+								89082, #OpenSSL 1.0.2 < 1.0.2g Multiple Vulnerabilities (DROWN)
+								96873, #OpenSSL 1.0.2 < 1.0.2k Multiple Vulnerabilities
+								93815, #OpenSSL 1.0.2 < 1.0.2i Multiple Vulnerabilities
+								78552, #OpenSSL 0.9.8 < 0.9.8zc Multiple Vulnerabilities
+80566, #OpenSSL 0.9.8 < 0.9.8zd Multiple Vulnerabilities
+82030, #OpenSSL 0.9.8 < 0.9.8zf Multiple Vulnerabilities
+84151, #OpenSSL 0.9.8 < 0.9.8zg Multiple Vulnerabilities
+87219, #OpenSSL 0.9.8 < 0.9.8zh X509_ATTRIBUTE Memory Leak DoS
+87222, #OpenSSL 1.0.2 < 1.0.2e Multiple Vulnerabilities
+88530, #OpenSSL 1.0.2 < 1.0.2f Multiple Vulnerabilities
+90891, #OpenSSL 1.0.2 < 1.0.2h Multiple Vulnerabilities
+109945, #OpenSSL 1.0.x < 1.0.2o Multiple Vulnerabilities
+112119, #OpenSSL 1.0.x < 1.0.2p Multiple Vulnerabilities
+104408, #OpenSSL 1.0.x < 1.0.2m RSA/DSA Unspecified Carry Issue
 							]
 						}
 					end

data/lib/risu/parsers/nessus/postprocess/oracle_database.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,7 +31,7 @@ module Risu
 						{
 							:description => "Oracle Database Patch Rollup",
 							:plugin_id => -99993,
-							:plugin_name => "Update to the latest Oracle Database",
+							:plugin_name => "Missing the latest Oracle Database Patches",
 							:item_name => "Update to the latest Oracle Database",
 							:plugin_ids => [
 								45625,
@@ -72,7 +72,7 @@ module Risu
 								80906,
 								78540,
 								72982,
-								
+
 
 
 							]

data/lib/risu/parsers/nessus/postprocess/php.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,76 +31,101 @@ module Risu
 						{
 							:description => "PHP Patch Rollup",
 							:plugin_id => -99988,
-							:plugin_name => "Update to the latest PHP",
+							:plugin_name => "Missing the latest PHP Patches",
 							:item_name => "Update to the latest PHP",
 							:plugin_ids => [
-								76281,
-								66843,
-								67260,
-								69401,
-								72881,
-								46803,
-								66585,
-								71427,
-								71927,
-								73338,
-								73862,
-								74291,
-								76791,
-								11850,
-								15973,
-								17710,
-								17796,
-								18033,
-								20111,
-								22268,
-								24906,
-								29833,
-								33849,
-								35067,
-								41014,
-								57537,
-								58966,
-								66842,
-								58988,
-								67259,
-								77285,
-								35750,
-								39480,
-								43351,
-								44921,
-								64992,
-								66584,
-								71426,
-								77402,
-								78545,
-								79246,
-								80330,
-								81080,
-								81510,
-								82025,
-								83033,
-								83517,
-								84362,
-								84671,
-								32123,
-								35043,
-								48244,
-								28181,
-								51139,
-								51439,
-								73289,
-								60085,
-								48245,
-								51140,
-								52717,
-								55925,
-								59056,
-								59529,
-								
-
-
-
+76281, #PHP 5.4.x < 5.4.30 Multiple Vulnerabilities
+66843, #PHP 5.4.x < 5.4.16 Multiple Vulnerabilities
+67260, #PHP 5.4.x < 5.4.17 Buffer Overflow
+69401, #PHP 5.4.x < 5.4.18 Multiple Vulnerabilities
+72881, #PHP 5.4.x < 5.4.26 Multiple Vulnerabilities
+46803, #PHP expose_php Information Disclosure
+66585, #PHP 5.4.x < 5.4.13 Information Disclosure
+71427, #PHP 5.4.x < 5.4.23 OpenSSL openssl_x509_parse() Memory Corruption
+71927, #PHP 5.4.x < 5.4.24 Multiple Vulnerabilities
+73338, #PHP 5.4.x < 5.4.27 awk Magic Parsing BEGIN DoS
+73862, #PHP 5.4.x < 5.4.28 FPM Unix Socket Insecure Permission Escalation
+74291, #PHP 5.4.x < 5.4.29 'src/cdf.c' Multiple Vulnerabilities
+76791, #PHP 5.4.x < 5.4.31 CLI Server 'header' DoS
+11850, #PHP < 4.3.3 Multiple Vulnerabilities
+15973, #PHP < 4.3.10 / 5.0.3 Multiple Vulnerabilities
+17710, #PHP < 4.4.4 Multiple Vulnerabilities
+17796, #PHP 4.x < 4.3.0 ZendEngine Integer Overflow
+18033, #PHP < 4.3.11 / 5.0.3 Multiple Unspecified Vulnerabilities
+20111, #PHP < 4.4.1 / 5.0.6 Multiple Vulnerabilities
+22268, #PHP < 4.4.3 / 5.1.4 Multiple Vulnerabilities
+24906, #PHP < 4.4.5 Multiple Vulnerabilities
+29833, #PHP < 4.4.8 Multiple Vulnerabilities
+33849, #PHP < 4.4.9 Multiple Vulnerabilities
+35067, #PHP < 5.2.8 Multiple Vulnerabilities
+41014, #PHP < 5.2.11 Multiple Vulnerabilities
+57537, #PHP < 5.3.9 Multiple Vulnerabilities
+58966, #PHP < 5.3.11 Multiple Vulnerabilities
+66842, #PHP 5.3.x < 5.3.26 Multiple Vulnerabilities
+58988, #PHP < 5.3.12 / 5.4.2 CGI Query String Code Execution
+67259, #PHP 5.3.x < 5.3.27 Multiple Vulnerabilities
+77285, #PHP 5.3.x < 5.3.29 Multiple Vulnerabilities
+35750, #PHP < 5.2.9 Multiple Vulnerabilities
+39480, #PHP < 5.2.10 Multiple Vulnerabilities
+43351, #PHP < 5.2.12 Multiple Vulnerabilities
+44921, #PHP < 5.3.2 / 5.2.13 Multiple Vulnerabilities
+64992, #PHP 5.3.x < 5.3.22 Multiple Vulnerabilities
+66584, #PHP 5.3.x < 5.3.23 Information Disclosure
+71426, #PHP 5.3.x < 5.3.28 Multiple OpenSSL Vulnerabilities
+77402, #PHP 5.4.x < 5.4.32 Multiple Vulnerabilities
+78545, #PHP 5.4.x < 5.4.34 Multiple Vulnerabilities
+79246, #PHP 5.4.x < 5.4.35 'donote' DoS
+80330, #PHP 5.4.x < 5.4.36 'process_nested_data' RCE
+81080, #PHP 5.4.x < 5.4.37 Multiple Vulnerabilities
+81510, #PHP 5.4.x < 5.4.38 Multiple Vulnerabilities (GHOST)
+82025, #PHP 5.4.x < 5.4.39 Multiple Vulnerabilities
+83033, #PHP 5.4.x < 5.4.40 Multiple Vulnerabilities
+83517, #PHP 5.4.x < 5.4.41 Multiple Vulnerabilities
+84362, #PHP 5.4.x < 5.4.42 Multiple Vulnerabilities
+84671, #PHP 5.4.x < 5.4.43 Multiple Vulnerabilities (BACKRONYM)
+32123, #PHP < 5.2.6 Multiple Vulnerabilities
+35043, #PHP 5 < 5.2.7 Multiple Vulnerabilities
+48244, #PHP 5.2 < 5.2.14 Multiple Vulnerabilities
+28181, #PHP < 5.2.5 Multiple Vulnerabilities
+51139, #PHP 5.2 < 5.2.15 Multiple Vulnerabilities
+51439, #PHP 5.2 < 5.2.17 / 5.3 < 5.3.5 String To Double Conversion DoS
+73289, #PHP PHP_RSHUTDOWN_FUNCTION Security Bypass
+60085, #PHP 5.3.x < 5.3.15 Multiple Vulnerabilities
+48245, #PHP 5.3 < 5.3.3 Multiple Vulnerabilities
+51140, #PHP 5.3 < 5.3.4 Multiple Vulnerabilities
+52717, #PHP 5.3 < 5.3.6 Multiple Vulnerabilities
+55925, #PHP 5.3 < 5.3.7 Multiple Vulnerabilities
+59056, #PHP 5.3.x < 5.3.13 CGI Query String Code Execution
+59529, #PHP 5.3.x < 5.3.14 Multiple Vulnerabilities
+88679 ,#PHP prior to 5.5.x < 5.5.31 / 5.6.x < 5.6.17 Multiple Vulnerabilities -
+88694, #PHP 5.6.x < 5.6.18 Multiple Vulnerabilities -
+90008, #PHP 5.6.x < 5.6.19 Multiple Vulnerabilities -
+90361, #PHP 5.6.x < 5.6.20 Multiple Vulnerabilities -
+91442, #PHP 5.6.x < 5.6.22 Multiple Vulnerabilities -
+91898, #PHP 5.6.x < 5.6.23 Multiple Vulnerabilities -
+92555, #PHP 5.6.x < 5.6.24 Multiple Vulnerabilities (httpoxy) -
+93656, #PHP 5.6.x < 5.6.26 Multiple Vulnerabilities -
+94106, #PHP 5.6.x < 5.6.27 Multiple Vulnerabilities -
+94955, #PHP 5.6.x < 5.6.28 Multiple Vulnerabilities -
+95874, #PHP 5.6.x < 5.6.29 Multiple Vulnerabilities -
+101525, #PHP 5.6.x < 5.6.31 Multiple Vulnerabilities -
+90921, #PHP 5.6.x < 5.6.21 Multiple Vulnerabilities -
+93077, #PHP 5.6.x < 5.6.25 Multiple Vulnerabilities -
+96799, #PHP 5.6.x < 5.6.30 Multiple DoS
+104631, #PHP 5.6.x < 5.6.32 Multiple Vulnerabilities
+107216, #PHP 5.6.x < 5.6.34 Stack Buffer Overflow
+119764, #PHP 5.6.x < 5.6.39 Arbitrary Command Injection Vulnerability
+105771, #PHP 5.6.x < 5.6.33 Multiple Vulnerabilities
+109576, #PHP 5.6.x < 5.6.36 Multiple Vulnerabilities
+111230, #PHP 5.6.x < 5.6.37 exif_thumbnail_extract() DoS
+117497, #PHP 5.6.x < 5.6.38 Transfer-Encoding Parameter XSS Vulnerability
+84673, #PHP 5.6.x < 5.6.11 Multiple Vulnerabilities (BACKRONYM)
+84364, #PHP 5.6.x < 5.6.10 Multiple Vulnerabilities
+85300, #PHP 5.6.x < 5.6.12 Multiple Vulnerabilities
+85887, #PHP 5.6.x < 5.6.13 Multiple Vulnerabilities
+121602, #PHP 5.6.x < 5.6.40 Multiple vulnerabilities.
+86301, #PHP 5.6.x < 5.6.14 Multiple Vulnerabilities	
+122591, #PHP 5.6.x < 5.6.35 Security Bypass Vulnerability						
 							]
 						}
 					end