Known vulnerabilities in php - page 4
Vendor:
Fedoraproject
Software:
php
Software CPE:
cpe:2.3:o:fedoraproject:php:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
128
Public exploits:
12
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
8.4.24-1.fc43
8.5.9-1.fc44
8.4.23-1.fc43
8.5.8-1.fc44
8.5.7-4.fc45
8.5.6-1.fc44
8.4.21-1.fc43
8.4.21-1.fc42
8.3.23-1.fc41
8.4.10-1.fc42
7.4.11-1.fc33
7.4.11-1.fc32
7.3.23-1.fc31
7.3.21-1.fc31
7.4.9-1.fc32
7.3.18-1.fc30
7.3.18-1.fc31
7.4.6-1.fc32
7.4.5-1.fc32
7.3.17-1.fc30
7.3.17-1.fc31
7.4.4-1.fc32
7.3.16-1.fc31
7.3.16-1.fc30
7.3.15-1.fc30
7.3.15-1.fc31
7.3.14-1.fc31
7.3.14-1.fc30
7.3.13-1.fc31
7.3.13-1.fc30
7.3.11-1.fc31
7.3.11-1.fc30
7.2.24-1.fc29
7.3.8-1.fc30
7.2.21-1.fc29
7.2.19-2.fc29
7.3.6-1.fc30
7.3.5-1.fc30
7.2.18-1.fc28
7.2.18-1.fc29
7.2.17-1.fc29
7.2.17-1.fc28
7.3.4-1.fc30
7.2.16-1.fc29
7.2.16-1.fc28
7.3.3-1.fc30
7.2.14-1.fc29
7.2.14-1.fc28
7.2.13-2.fc29
7.2.13-2.fc28
7.2.12-1.fc29
7.2.12-1.fc28
7.1.22-1.fc27
7.2.10-1.fc29
7.2.10-1.fc28
7.1.20-1.fc27
7.2.8-1.fc28
7.1.17-1.fc26
7.1.17-1.fc27
7.2.5-1.fc28
7.1.16-1.fc27
7.1.16-1.fc26
7.2.4-1.fc28
7.1.15-1.fc26
7.1.15-1.fc27
7.1.13-1.fc26
7.1.13-1.fc27
7.0.25-1.fc25
7.1.11-1.fc27
7.1.11-1.fc26
7.1.7-1.fc26
5.6.31-1.fc24
7.0.21-1.fc25
5.6.27-1.fc24
5.6.27-1.fc23
7.0.12-2.fc25
5.6.26-1.fc23
5.6.26-1.fc24
7.0.11-1.fc25
7.0.10-1.fc25
5.6.24-2.fc24
5.6.24-1.fc23
5.6.23-1.fc24
5.6.23-1.fc22
5.6.23-1.fc23
5.6.22-1.fc22
5.6.22-1.fc23
5.6.22-1.fc24
5.6.21-1.fc24
5.6.21-1.fc22
5.6.21-1.fc23
5.6.20-1.fc22
5.6.20-1.fc23
5.6.20-1.fc24
5.6.19-1.fc22
5.6.19-1.fc23
5.6.18-1.fc22
5.6.18-1.fc23
5.6.17-1.fc23
5.6.17-1.fc22
5.6.14-1.fc22
5.6.14-1.fc23
5.6.14-1.fc21
5.6.13-1.fc23
5.6.13-1.fc22
5.6.13-1.fc21
5.6.11-1.fc21
5.6.9-1.fc21
5.6.9-1.fc22
5.6.8-1.fc21
5.6.8-1.fc22
5.6.7-1.fc21
5.6.7-2.fc22
5.6.6-1.fc21
5.6.5-1.fc21
5.6.4-2.fc21
5.6.2-1.fc21
8.3.18-1.fc40
8.3.18-1.fc41
8.4.5-1.fc42
8.1.12-1.fc36
8.1.12-1.fc37
8.0.25-1.fc35
8.0.24-1.fc35
8.1.11-1.fc36
8.1.11-1.fc37
8.1.8-1.fc36
8.1.7-1.fc36
8.0.20-1.fc35
8.0.16-1.fc35
7.4.28-1.fc34
8.0.13-1.fc35
7.4.26-1.fc34
7.4.26-1.fc33
7.4.25-1.fc34
7.4.25-1.fc33
8.0.12-2.fc35
7.4.23-1.fc34
7.4.23-1.fc33
8.0.10-1.fc35
7.4.21-1.fc34
7.4.21-1.fc33
7.4.19-1.fc34
7.4.19-1.fc33
7.4.19-1.fc32
7.4.18-1.fc34
7.4.18-1.fc32
7.4.18-1.fc33
7.4.15-1.fc33
7.4.15-1.fc32
7.4.14-1.fc32
7.4.14-1.fc33
8.3.14-1.fc41
8.3.14-1.fc40
8.2.24-1.fc39
8.3.12-1.fc40
8.3.12-1.fc41
8.3.8-1.fc40
8.2.20-1.fc39
8.2.18-1.fc38
8.2.18-1.fc39
8.3.5-1.fc40
8.2.9-2.fc38
8.1.22-1.fc37
8.2.9-1.fc38
8.1.20-1.fc37
8.2.7-2.fc38
8.1.16-1.fc36
8.1.16-1.fc37
8.1.14-1.fc37
8.1.14-1.fc36
Vulnerabilities (128)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU55265 - Double Free CVE-2019-11049 |
CWE-415 | High | 7.3.13-1.fc30, 7.3.13-1.fc31 | 22.07.2021 |
SB2019122369 SB2021072292 SB2020021832 and 2 more |
||
| #VU33363 - Improper input validation CVE-2019-11045 |
CWE-20 | Medium | 7.3.13-1.fc30, 7.3.13-1.fc31 | 23.12.2019 |
SB2019122362 SB2019121937 SB2020012030 and 7 more |
||
| #VU33364 - Out-of-bounds read CVE-2019-11047 |
CWE-125 | Medium | 7.3.13-1.fc30, 7.3.13-1.fc31 | 23.12.2019 |
SB2019122363 SB2019121938 SB2020012030 and 7 more |
||
| #VU33365 - Use After Free CVE-2019-11050 |
CWE-416 | Medium | 7.3.13-1.fc30, 7.3.13-1.fc31 | 23.12.2019 |
SB2019121939 SB2020012030 SB2020120202 and 6 more |
||
| #VU34943 - Improper input validation CVE-2019-11044 |
CWE-20 | Medium | 7.3.13-1.fc30, 7.3.13-1.fc31 | 23.12.2019 |
SB2019122364 SB2021072292 SB2019121738 and 1 more |
||
| #VU22304 - Memory corruption CVE-2019-11043 |
CWE-119 | High | 7.2.24-1.fc29, 7.3.11-1.fc30, 7.3.11-1.fc31 | 27.10.2019 |
SB2019102707 SB2019102708 SB2019102709 and 22 more |
||
| #VU21274 - Out-of-bounds read CVE-2019-11038 |
CWE-125 | Medium | 7.2.19-2.fc29, 7.3.6-1.fc30 | 23.09.2019 |
SB2019092305 SB2019072508 SB2019110109 and 11 more |
||
| #VU21218 - Out-of-bounds read CVE-2019-11041 |
CWE-125 | Low | 7.2.21-1.fc29, 7.3.8-1.fc30 | 20.09.2019 |
SB2019092002 SB2019092003 SB2019092105 and 9 more |
||
| #VU21217 - Out-of-bounds read CVE-2019-11042 |
CWE-125 | Low | 7.2.21-1.fc29, 7.3.8-1.fc30 | 20.09.2019 |
SB2019092002 SB2019092003 SB2019092105 and 9 more |
||
| #VU19278 - Out-of-bounds read CVE-2019-11040 |
CWE-125 | Medium | 7.2.19-2.fc29, 7.3.6-1.fc30 | 22.07.2019 |
SB2019072201 SB2019092105 SB2019092305 and 8 more |
||
| #VU19277 - Integer overflow CVE-2019-11039 |
CWE-190 | Medium | 7.2.19-2.fc29, 7.3.6-1.fc30 | 22.07.2019 |
SB2019072201 SB2019092105 SB2019092305 and 8 more |
||
| #VU18801 - Out-of-bounds read CVE-2019-11036 |
CWE-125 | Low | 7.2.18-1.fc28, 7.2.18-1.fc29, 7.3.5-1.fc30 | 14.06.2019 |
SB2019061403 SB2019060312 SB2019092105 and 8 more |
||
| #VU16914 - NULL Pointer Dereference CVE-2018-19935 |
CWE-476 | Low | 7.2.13-2.fc28, 7.2.13-2.fc29 | 10.01.2019 |
SB2019011006 SB2018072423 SB2018072424 and 2 more |
||
| #VU16315 - NULL Pointer Dereference CVE-2018-19935 |
CWE-476 | Low | 7.2.13-2.fc28, 7.2.13-2.fc29 | 07.12.2018 |
SB2018120716 SB2018121101 SB2019011305 and 3 more |
||
| #VU16067 - Command injection CVE-2018-19518 |
CWE-77 | Low | 7.2.13-2.fc28, 7.2.13-2.fc29 | 27.11.2018 |
SB2018112208 SB2018121008 SB2018121011 and 8 more |
||
| #VU15292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-17082 |
CWE-79 | Low | 7.1.22-1.fc27, 7.2.10-1.fc28, 7.2.10-1.fc29 | 10.10.2018 |
SB2018101016 SB2018100601 SB2018100602 and 9 more |
||
| #VU12258 - Memory corruption CVE-2018-10549 |
CWE-119 | Low | 7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 | 26.04.2018 |
SB2018042612 SB2018051111 SB2018051702 and 8 more |
||
| #VU12257 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-10546 |
CWE-835 | Low | 7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 | 26.04.2018 |
SB2018042612 SB2018050902 SB2018051104 and 11 more |
||
| #VU12256 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2018-10548 |
CWE-300 | Low | 7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 | 26.04.2018 |
SB2018042612 SB2018050902 SB2018051104 and 12 more |
||
| #VU10389 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-5712 |
CWE-79 | Low | 7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 | 06.02.2018 |
SB2018020401 SB2018020703 SB2018020902 and 14 more |
Showing elements 61 - 80 out of 128