Known vulnerabilities in php - page 4

Software: php
Software CPE: cpe:2.3:o:fedoraproject:php:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 128
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php php is affected by 128 known vulnerabilities: 2 critical, 47 high, 43 medium, 36 low Critical High Medium Low

Vulnerabilities (128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55265 - Double Free
CVE-2019-11049
CWE-415 High
No
No
7.3.13-1.fc30, 7.3.13-1.fc31 22.07.2021 SB2019122369
SB2021072292
SB2020021832
and 2 more
#VU33363 - Improper input validation
CVE-2019-11045
CWE-20 Medium
No
No
7.3.13-1.fc30, 7.3.13-1.fc31 23.12.2019 SB2019122362
SB2019121937
SB2020012030
and 7 more
#VU33364 - Out-of-bounds read
CVE-2019-11047
CWE-125 Medium
No
No
7.3.13-1.fc30, 7.3.13-1.fc31 23.12.2019 SB2019122363
SB2019121938
SB2020012030
and 7 more
#VU33365 - Use After Free
CVE-2019-11050
CWE-416 Medium
No
No
7.3.13-1.fc30, 7.3.13-1.fc31 23.12.2019 SB2019121939
SB2020012030
SB2020120202
and 6 more
#VU34943 - Improper input validation
CVE-2019-11044
CWE-20 Medium
No
No
7.3.13-1.fc30, 7.3.13-1.fc31 23.12.2019 SB2019122364
SB2021072292
SB2019121738
and 1 more
#VU22304 - Memory corruption
CVE-2019-11043
CWE-119 High
Available
Exploited
7.2.24-1.fc29, 7.3.11-1.fc30, 7.3.11-1.fc31 27.10.2019 SB2019102707
SB2019102708
SB2019102709
and 22 more
#VU21274 - Out-of-bounds read
CVE-2019-11038
CWE-125 Medium
No
No
7.2.19-2.fc29, 7.3.6-1.fc30 23.09.2019 SB2019092305
SB2019072508
SB2019110109
and 11 more
#VU21218 - Out-of-bounds read
CVE-2019-11041
CWE-125 Low
No
No
7.2.21-1.fc29, 7.3.8-1.fc30 20.09.2019 SB2019092002
SB2019092003
SB2019092105
and 9 more
#VU21217 - Out-of-bounds read
CVE-2019-11042
CWE-125 Low
No
No
7.2.21-1.fc29, 7.3.8-1.fc30 20.09.2019 SB2019092002
SB2019092003
SB2019092105
and 9 more
#VU19278 - Out-of-bounds read
CVE-2019-11040
CWE-125 Medium
No
No
7.2.19-2.fc29, 7.3.6-1.fc30 22.07.2019 SB2019072201
SB2019092105
SB2019092305
and 8 more
#VU19277 - Integer overflow
CVE-2019-11039
CWE-190 Medium
No
No
7.2.19-2.fc29, 7.3.6-1.fc30 22.07.2019 SB2019072201
SB2019092105
SB2019092305
and 8 more
#VU18801 - Out-of-bounds read
CVE-2019-11036
CWE-125 Low
No
No
7.2.18-1.fc28, 7.2.18-1.fc29, 7.3.5-1.fc30 14.06.2019 SB2019061403
SB2019060312
SB2019092105
and 8 more
#VU16914 - NULL Pointer Dereference
CVE-2018-19935
CWE-476 Low
No
No
7.2.13-2.fc28, 7.2.13-2.fc29 10.01.2019 SB2019011006
SB2018072423
SB2018072424
and 2 more
#VU16315 - NULL Pointer Dereference
CVE-2018-19935
CWE-476 Low
No
No
7.2.13-2.fc28, 7.2.13-2.fc29 07.12.2018 SB2018120716
SB2018121101
SB2019011305
and 3 more
#VU16067 - Command injection
CVE-2018-19518
CWE-77 Low
Available
No
7.2.13-2.fc28, 7.2.13-2.fc29 27.11.2018 SB2018112208
SB2018121008
SB2018121011
and 8 more
#VU15292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17082
CWE-79 Low
No
No
7.1.22-1.fc27, 7.2.10-1.fc28, 7.2.10-1.fc29 10.10.2018 SB2018101016
SB2018100601
SB2018100602
and 9 more
#VU12258 - Memory corruption
CVE-2018-10549
CWE-119 Low
No
No
7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 26.04.2018 SB2018042612
SB2018051111
SB2018051702
and 8 more
#VU12257 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-10546
CWE-835 Low
No
No
7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 26.04.2018 SB2018042612
SB2018050902
SB2018051104
and 11 more
#VU12256 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-10548
CWE-300 Low
No
No
7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 26.04.2018 SB2018042612
SB2018050902
SB2018051104
and 12 more
#VU10389 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5712
CWE-79 Low
No
No
7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 06.02.2018 SB2018020401
SB2018020703
SB2018020902
and 14 more


Showing elements 61 - 80 out of 128