Known vulnerabilities in phpmyadmin (Alpine package) - page 4

Software CPE: cpe:2.3:o:alpine:phpmyadmin_alpine_package:*:*:*:*:*:alpine_linux:*:*
Total vulnerabilities: 96
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting phpmyadmin (Alpine package) phpmyadmin (Alpine package) is affected by 96 known vulnerabilities: 12 high, 41 medium, 43 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU13053 - Out-of-bounds read
CVE-2016-6293
CWE-125 Low
No
No
4.6.5.2-r0 30.05.2018 SB2018052513
SB2016091409
SB2016110139
and 1 more
#VU33627 - Improper input validation
CVE-2016-6630
CWE-20 Medium
No
No
4.4.15.8-r0 11.12.2016 SB2016121145
SB2016101835
SB2016082908
#VU33626 - Security Features
CVE-2016-6629
CWE-254 High
No
No
4.4.15.8-r0 11.12.2016 SB2016121144
SB2016101834
SB2016082908
#VU33624 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6627
CWE-200 Medium
No
No
4.4.15.8-r0 11.12.2016 SB2016121142
SB2016101832
SB2016082908
#VU33623 - Security Features
CVE-2016-6626
CWE-254 Medium
No
No
4.4.15.8-r0 11.12.2016 SB2016121141
SB2016101831
SB2016082908
#VU33622 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6625
CWE-200 Low
No
No
4.4.15.8-r0 11.12.2016 SB2016121140
SB2016101830
SB2016082908
#VU33621 - Security Features
CVE-2016-6624
CWE-254 Medium
No
No
4.4.15.8-r0 11.12.2016 SB2016121139
SB2016101829
SB2016082908
#VU33617 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2016-6619
CWE-89 High
No
No
4.4.15.8-r0 11.12.2016 SB2016121135
SB2016101825
SB2016082908
#VU32344 - Exposure of sensitive information to an unauthorized actor
CVE-2015-8669
CWE-200 Medium
No
No
4.5.4.1-r0 27.12.2015 SB2015122701
SB2016020905
SB2015122504
and 4 more
#VU32372 - Security Features
CVE-2015-7873
CWE-254 Medium
No
No
4.4.15.1-r0 28.10.2015 SB2015102804
SB2015120207
SB2015102504
and 3 more
#VU32371 - Exposure of sensitive information to an unauthorized actor
CVE-2015-6830
CWE-200 Medium
No
No
4.3.13.1-r0 14.09.2015 SB2015091403
SB2015101402
SB2015090809
and 3 more
#VU32488 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-6300
CWE-79 Low
No
No
4.0.10.4-r0 08.11.2014 SB2014110803
SB2014102104
SB2015053101
and 4 more
#VU32489 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-7217
CWE-79 Low
No
No
4.0.10.4-r0 03.10.2014 SB2014100301
SB2014102105
SB2014100211
and 3 more
#VU33088 - Memory corruption
CVE-2014-5461
CWE-119 Medium
No
No
4.2.8-r0 04.09.2014 SB2014090305
SB2014091811
SB2017012328
and 1 more
#VU32498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5273
CWE-79 Low
No
No
4.0.10.2-r0 22.08.2014 SB2014082201
SB2014090303
SB2014081805
and 1 more
#VU32499 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5274
CWE-79 Low
No
No
4.2.8-r0 22.08.2014 SB2014082202
SB2014090304
SB2014081805
#VU32512 - Permissions, Privileges, and Access Controls
CVE-2014-4987
CWE-264 Low
No
No
4.2.6-r0 20.07.2014 SB2014072003
SB2014072219
SB2015053101
#VU32513 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4954
CWE-79 Low
No
No
4.2.6-r0 20.07.2014 SB2014072004
SB2014072218
#VU32510 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4986
CWE-79 Low
No
No
4.0.10.1-r0 20.07.2014 SB2014072001
SB2014072217
SB2015053101
#VU32511 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4955
CWE-79 Low
No
No
4.0.10.1-r0 20.07.2014 SB2014072002
SB2014072216


Showing elements 61 - 80 out of 96