Known vulnerabilities in php - page 2
Vendor:
Fedoraproject
Software:
php
Software CPE:
cpe:2.3:o:fedoraproject:php:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
128
Public exploits:
12
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
8.4.24-1.fc43
8.5.9-1.fc44
8.4.23-1.fc43
8.5.8-1.fc44
8.5.7-4.fc45
8.5.6-1.fc44
8.4.21-1.fc43
8.4.21-1.fc42
8.3.23-1.fc41
8.4.10-1.fc42
7.4.11-1.fc33
7.4.11-1.fc32
7.3.23-1.fc31
7.3.21-1.fc31
7.4.9-1.fc32
7.3.18-1.fc30
7.3.18-1.fc31
7.4.6-1.fc32
7.4.5-1.fc32
7.3.17-1.fc30
7.3.17-1.fc31
7.4.4-1.fc32
7.3.16-1.fc31
7.3.16-1.fc30
7.3.15-1.fc30
7.3.15-1.fc31
7.3.14-1.fc31
7.3.14-1.fc30
7.3.13-1.fc31
7.3.13-1.fc30
7.3.11-1.fc31
7.3.11-1.fc30
7.2.24-1.fc29
7.3.8-1.fc30
7.2.21-1.fc29
7.2.19-2.fc29
7.3.6-1.fc30
7.3.5-1.fc30
7.2.18-1.fc28
7.2.18-1.fc29
7.2.17-1.fc29
7.2.17-1.fc28
7.3.4-1.fc30
7.2.16-1.fc29
7.2.16-1.fc28
7.3.3-1.fc30
7.2.14-1.fc29
7.2.14-1.fc28
7.2.13-2.fc29
7.2.13-2.fc28
7.2.12-1.fc29
7.2.12-1.fc28
7.1.22-1.fc27
7.2.10-1.fc29
7.2.10-1.fc28
7.1.20-1.fc27
7.2.8-1.fc28
7.1.17-1.fc26
7.1.17-1.fc27
7.2.5-1.fc28
7.1.16-1.fc27
7.1.16-1.fc26
7.2.4-1.fc28
7.1.15-1.fc26
7.1.15-1.fc27
7.1.13-1.fc26
7.1.13-1.fc27
7.0.25-1.fc25
7.1.11-1.fc27
7.1.11-1.fc26
7.1.7-1.fc26
5.6.31-1.fc24
7.0.21-1.fc25
5.6.27-1.fc24
5.6.27-1.fc23
7.0.12-2.fc25
5.6.26-1.fc23
5.6.26-1.fc24
7.0.11-1.fc25
7.0.10-1.fc25
5.6.24-2.fc24
5.6.24-1.fc23
5.6.23-1.fc24
5.6.23-1.fc22
5.6.23-1.fc23
5.6.22-1.fc22
5.6.22-1.fc23
5.6.22-1.fc24
5.6.21-1.fc24
5.6.21-1.fc22
5.6.21-1.fc23
5.6.20-1.fc22
5.6.20-1.fc23
5.6.20-1.fc24
5.6.19-1.fc22
5.6.19-1.fc23
5.6.18-1.fc22
5.6.18-1.fc23
5.6.17-1.fc23
5.6.17-1.fc22
5.6.14-1.fc22
5.6.14-1.fc23
5.6.14-1.fc21
5.6.13-1.fc23
5.6.13-1.fc22
5.6.13-1.fc21
5.6.11-1.fc21
5.6.9-1.fc21
5.6.9-1.fc22
5.6.8-1.fc21
5.6.8-1.fc22
5.6.7-1.fc21
5.6.7-2.fc22
5.6.6-1.fc21
5.6.5-1.fc21
5.6.4-2.fc21
5.6.2-1.fc21
8.3.18-1.fc40
8.3.18-1.fc41
8.4.5-1.fc42
8.1.12-1.fc36
8.1.12-1.fc37
8.0.25-1.fc35
8.0.24-1.fc35
8.1.11-1.fc36
8.1.11-1.fc37
8.1.8-1.fc36
8.1.7-1.fc36
8.0.20-1.fc35
8.0.16-1.fc35
7.4.28-1.fc34
8.0.13-1.fc35
7.4.26-1.fc34
7.4.26-1.fc33
7.4.25-1.fc34
7.4.25-1.fc33
8.0.12-2.fc35
7.4.23-1.fc34
7.4.23-1.fc33
8.0.10-1.fc35
7.4.21-1.fc34
7.4.21-1.fc33
7.4.19-1.fc34
7.4.19-1.fc33
7.4.19-1.fc32
7.4.18-1.fc34
7.4.18-1.fc32
7.4.18-1.fc33
7.4.15-1.fc33
7.4.15-1.fc32
7.4.14-1.fc32
7.4.14-1.fc33
8.3.14-1.fc41
8.3.14-1.fc40
8.2.24-1.fc39
8.3.12-1.fc40
8.3.12-1.fc41
8.3.8-1.fc40
8.2.20-1.fc39
8.2.18-1.fc38
8.2.18-1.fc39
8.3.5-1.fc40
8.2.9-2.fc38
8.1.22-1.fc37
8.2.9-1.fc38
8.1.20-1.fc37
8.2.7-2.fc38
8.1.16-1.fc36
8.1.16-1.fc37
8.1.14-1.fc37
8.1.14-1.fc36
Vulnerabilities (128)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU91109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-5585 |
CWE-78 | Medium | 8.2.20-1.fc39, 8.3.8-1.fc40 | 05.06.2024 |
SB2024060501 SB2024060502 SB2024060503 and 8 more |
||
| #VU91108 - Observable discrepancy CVE-2024-2408 |
CWE-203 | Medium | 8.2.20-1.fc39, 8.3.8-1.fc40 | 05.06.2024 |
SB2024060501 SB2024060502 SB2024060503 and 4 more |
||
| #VU91107 - Improper input validation CVE-2024-5458 |
CWE-20 | Medium | 8.2.20-1.fc39, 8.3.8-1.fc40 | 05.06.2024 |
SB2024060501 SB2024060502 SB2024060503 and 18 more |
||
| #VU88485 - Resource exhaustion CVE-2024-2757 |
CWE-400 | Medium | 8.3.5-1.fc40 | 11.04.2024 |
SB2024041173 SB2024041175 SB2024071831 and 2 more |
||
| #VU88484 - Improper Authentication CVE-2024-3096 |
CWE-287 | High | 8.2.18-1.fc38, 8.2.18-1.fc39, 8.3.5-1.fc40 | 11.04.2024 |
SB2024041173 SB2024041175 SB2024041176 and 25 more |
||
| #VU88483 - Security Features CVE-2024-2756 |
CWE-254 | Low | 8.2.18-1.fc38, 8.2.18-1.fc39, 8.3.5-1.fc40 | 11.04.2024 |
SB2024041173 SB2024041175 SB2024041176 and 24 more |
||
| #VU88482 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-1874 |
CWE-78 | Medium | 8.2.18-1.fc38, 8.2.18-1.fc39, 8.3.5-1.fc40 | 11.04.2024 |
SB2024041173 SB2024041175 SB2024041176 and 7 more |
||
| #VU78978 - Memory corruption CVE-2023-3824 |
CWE-119 | Critical | 8.1.22-1.fc37, 8.2.9-1.fc38, 8.2.9-2.fc38 | 06.08.2023 |
SB2023080604 SB2023081704 SB20230821142 and 32 more |
||
| #VU78977 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-3823 |
CWE-611 | High | 8.1.22-1.fc37, 8.2.9-1.fc38, 8.2.9-2.fc38 | 06.08.2023 |
SB2023080604 SB2023081704 SB20230821142 and 31 more |
||
| #VU72167 - Out-of-bounds write CVE-2023-0568 |
CWE-787 | Medium | 8.1.16-1.fc36, 8.1.16-1.fc37 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 27 more |
||
| #VU72166 - Use of Insufficiently Random Values CVE-2023-0567 |
CWE-330 | Medium | 8.1.16-1.fc36, 8.1.16-1.fc37 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 23 more |
||
| #VU72165 - Improper input validation CVE-2023-0662 |
CWE-20 | Medium | 8.1.16-1.fc36, 8.1.16-1.fc37 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 25 more |
||
| #VU70788 - Integer overflow CVE-2022-31631 |
CWE-190 | Medium | 8.1.14-1.fc36, 8.1.14-1.fc37 | 07.01.2023 |
SB2023010702 SB2023010704 SB2023011201 and 21 more |
||
| #VU68887 - Integer overflow CVE-2022-37454 |
CWE-190 | High | 8.0.25-1.fc35, 8.1.12-1.fc36, 8.1.12-1.fc37 | 01.11.2022 |
SB2022110118 SB2022110119 SB2022110209 and 69 more |
||
| #VU68886 - Out-of-bounds read CVE-2022-31630 |
CWE-125 | Medium | 8.0.25-1.fc35, 8.1.12-1.fc36, 8.1.12-1.fc37 | 01.11.2022 |
SB2022110119 SB2022110336 SB2022110814 and 21 more |
||
| #VU67756 - Security Features CVE-2022-31629 |
CWE-254 | Low | 8.0.24-1.fc35, 8.1.11-1.fc36, 8.1.11-1.fc37, 8.1.12-1.fc37, 8.2.18-1.fc38, 8.2.18-1.fc39, 8.3.5-1.fc40 | 29.09.2022 |
SB2022092960 SB2022093041 SB2022101944 and 49 more |
||
| #VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-31628 |
CWE-835 | Medium | 8.0.24-1.fc35, 8.1.11-1.fc36, 8.1.11-1.fc37, 8.1.12-1.fc37 | 29.09.2022 |
SB2022092960 SB2022093041 SB2022101944 and 26 more |
||
| #VU65292 - Heap-based Buffer Overflow CVE-2022-31627 |
CWE-122 | High | 8.1.8-1.fc36 | 14.07.2022 |
SB2022071404 SB2022071405 SB2022072549 and 5 more |
||
| #VU64232 - Use of Uninitialized Resource CVE-2022-31625 |
CWE-908 | High | 8.0.20-1.fc35, 8.1.7-1.fc36 | 14.06.2022 |
SB2022061403 SB2022061404 SB2022061529 and 23 more |
||
| #VU64231 - Memory corruption CVE-2022-31626 |
CWE-119 | High | 8.0.20-1.fc35, 8.1.7-1.fc36 | 14.06.2022 |
SB2022061403 SB2022061404 SB2022061529 and 25 more |
Showing elements 21 - 40 out of 128