Known vulnerabilities in php7 (Alpine package) - page 3

Vendor: Alpine Linux Development Team
Software: php7 (Alpine package)
Software CPE: cpe:2.3:o:alpine:php7_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 67
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php7 (Alpine package) php7 (Alpine package) is affected by 67 known vulnerabilities: 13 high, 23 medium, 31 low Critical High Medium Low

Vulnerabilities (67)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22481 - Out-of-bounds read
CVE-2019-9639		 CWE-125 Medium
No
No
 7.1.30-r0, 7.2.17-r0 01.11.2019 SB2019110109
SB2020042848
SB2018072418
and 1 more
#VU22480 - Out-of-bounds read
CVE-2019-9638		 CWE-125 Medium
No
No
 7.1.30-r0, 7.2.17-r0 01.11.2019 SB2019110109
SB2020042848
SB2018072417
and 1 more
#VU21220 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-9637		 CWE-362 Low
No
No
 7.1.30-r0, 7.2.17-r0 20.09.2019 SB2019092004
SB2019110109
SB2020042848
and 2 more
#VU16914 - NULL Pointer Dereference
CVE-2018-19935		 CWE-476 Low
No
No
 7.1.30-r0 10.01.2019 SB2019011006
SB2018072423
SB2018072424
and 2 more
#VU16067 - Command injection
CVE-2018-19518		 CWE-77 Low
Available
No
 7.1.30-r0 27.11.2018 SB2018112208
SB2018121008
SB2018121011
and 8 more
#VU16019 - NULL Pointer Dereference
CVE-2018-19396		 CWE-476 Low
No
No
 7.1.30-r0 22.11.2018 SB2018112208
SB2018072429
#VU16018 - NULL Pointer Dereference
CVE-2018-19395		 CWE-476 Low
No
No
 7.1.30-r0 21.11.2018 SB2018112208
SB2018072428
#VU15509 - Improper Access Control
CVE-2018-20783		 CWE-284 Low
No
No
 7.1.30-r0, 7.2.17-r0 24.10.2018 SB2018102419
SB2019110109
SB2020042848
and 2 more
#VU13916 - Heap-based Buffer Overflow
CVE-2018-14851		 CWE-122 Low
No
No
 7.1.30-r0 19.07.2018 SB2018071908
SB2018121101
SB2018091805
and 4 more
#VU13915 - Integer overflow
CVE-2018-14883		 CWE-122 Low
No
No
 7.1.30-r0 19.07.2018 SB2018071908
SB2018121101
SB2018091805
and 4 more
#VU13498 - Use After Free
CVE-2018-12882		 CWE-416 High
No
No
 7.2.17-r0 26.06.2018 SB2018062706
SB2018070902
SB2018072020
and 3 more
#VU12327 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-10547		 CWE-79 Low
No
No
 7.1.30-r0 01.05.2018 SB2018042612
SB2018050902
SB2018051104
and 12 more
#VU12258 - Memory corruption
CVE-2018-10549		 CWE-119 Low
No
No
 7.1.30-r0 26.04.2018 SB2018042612
SB2018051111
SB2018051702
and 8 more
#VU12257 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-10546		 CWE-835 Low
No
No
 7.1.30-r0 26.04.2018 SB2018042612
SB2018050902
SB2018051104
and 11 more
#VU12256 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-10548		 CWE-300 Low
No
No
 7.1.30-r0 26.04.2018 SB2018042612
SB2018050902
SB2018051104
and 12 more
#VU11789 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7890		 CWE-200 Low
No
No
 7.1.10-r0 09.04.2018 SB2017081404
SB2017081405
SB2017081208
and 9 more
#VU10880 - Resource exhaustion
CVE-2015-9253		 CWE-400 Low
No
No
 7.2.8-r0 07.03.2018 SB2018021618
SB2018091805
SB2020021722
and 3 more
#VU10800 - Stack-based buffer overflow
CVE-2018-7584		 CWE-121 Low
No
No
 7.0.28-r0 01.03.2018 SB2018030106
SB2018030803
SB2018032605
and 10 more
#VU10390 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-5711		 CWE-835 Low
No
No
 7.0.27-r0 07.02.2018 SB2018020401
SB2018020703
SB2018020902
and 13 more
#VU10389 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5712		 CWE-79 Low
No
No
 7.0.27-r0 06.02.2018 SB2018020401
SB2018020703
SB2018020902
and 14 more


Showing elements 41 - 60 out of 67