Known vulnerabilities in php - page 5
Vendor:
Fedoraproject
Software:
php
Software CPE:
cpe:2.3:o:fedoraproject:php:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
128
Public exploits:
12
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
8.4.24-1.fc43
8.5.9-1.fc44
8.4.23-1.fc43
8.5.8-1.fc44
8.5.7-4.fc45
8.5.6-1.fc44
8.4.21-1.fc43
8.4.21-1.fc42
8.3.23-1.fc41
8.4.10-1.fc42
7.4.11-1.fc33
7.4.11-1.fc32
7.3.23-1.fc31
7.3.21-1.fc31
7.4.9-1.fc32
7.3.18-1.fc30
7.3.18-1.fc31
7.4.6-1.fc32
7.4.5-1.fc32
7.3.17-1.fc30
7.3.17-1.fc31
7.4.4-1.fc32
7.3.16-1.fc31
7.3.16-1.fc30
7.3.15-1.fc30
7.3.15-1.fc31
7.3.14-1.fc31
7.3.14-1.fc30
7.3.13-1.fc31
7.3.13-1.fc30
7.3.11-1.fc31
7.3.11-1.fc30
7.2.24-1.fc29
7.3.8-1.fc30
7.2.21-1.fc29
7.2.19-2.fc29
7.3.6-1.fc30
7.3.5-1.fc30
7.2.18-1.fc28
7.2.18-1.fc29
7.2.17-1.fc29
7.2.17-1.fc28
7.3.4-1.fc30
7.2.16-1.fc29
7.2.16-1.fc28
7.3.3-1.fc30
7.2.14-1.fc29
7.2.14-1.fc28
7.2.13-2.fc29
7.2.13-2.fc28
7.2.12-1.fc29
7.2.12-1.fc28
7.1.22-1.fc27
7.2.10-1.fc29
7.2.10-1.fc28
7.1.20-1.fc27
7.2.8-1.fc28
7.1.17-1.fc26
7.1.17-1.fc27
7.2.5-1.fc28
7.1.16-1.fc27
7.1.16-1.fc26
7.2.4-1.fc28
7.1.15-1.fc26
7.1.15-1.fc27
7.1.13-1.fc26
7.1.13-1.fc27
7.0.25-1.fc25
7.1.11-1.fc27
7.1.11-1.fc26
7.1.7-1.fc26
5.6.31-1.fc24
7.0.21-1.fc25
5.6.27-1.fc24
5.6.27-1.fc23
7.0.12-2.fc25
5.6.26-1.fc23
5.6.26-1.fc24
7.0.11-1.fc25
7.0.10-1.fc25
5.6.24-2.fc24
5.6.24-1.fc23
5.6.23-1.fc24
5.6.23-1.fc22
5.6.23-1.fc23
5.6.22-1.fc22
5.6.22-1.fc23
5.6.22-1.fc24
5.6.21-1.fc24
5.6.21-1.fc22
5.6.21-1.fc23
5.6.20-1.fc22
5.6.20-1.fc23
5.6.20-1.fc24
5.6.19-1.fc22
5.6.19-1.fc23
5.6.18-1.fc22
5.6.18-1.fc23
5.6.17-1.fc23
5.6.17-1.fc22
5.6.14-1.fc22
5.6.14-1.fc23
5.6.14-1.fc21
5.6.13-1.fc23
5.6.13-1.fc22
5.6.13-1.fc21
5.6.11-1.fc21
5.6.9-1.fc21
5.6.9-1.fc22
5.6.8-1.fc21
5.6.8-1.fc22
5.6.7-1.fc21
5.6.7-2.fc22
5.6.6-1.fc21
5.6.5-1.fc21
5.6.4-2.fc21
5.6.2-1.fc21
8.3.18-1.fc40
8.3.18-1.fc41
8.4.5-1.fc42
8.1.12-1.fc36
8.1.12-1.fc37
8.0.25-1.fc35
8.0.24-1.fc35
8.1.11-1.fc36
8.1.11-1.fc37
8.1.8-1.fc36
8.1.7-1.fc36
8.0.20-1.fc35
8.0.16-1.fc35
7.4.28-1.fc34
8.0.13-1.fc35
7.4.26-1.fc34
7.4.26-1.fc33
7.4.25-1.fc34
7.4.25-1.fc33
8.0.12-2.fc35
7.4.23-1.fc34
7.4.23-1.fc33
8.0.10-1.fc35
7.4.21-1.fc34
7.4.21-1.fc33
7.4.19-1.fc34
7.4.19-1.fc33
7.4.19-1.fc32
7.4.18-1.fc34
7.4.18-1.fc32
7.4.18-1.fc33
7.4.15-1.fc33
7.4.15-1.fc32
7.4.14-1.fc32
7.4.14-1.fc33
8.3.14-1.fc41
8.3.14-1.fc40
8.2.24-1.fc39
8.3.12-1.fc40
8.3.12-1.fc41
8.3.8-1.fc40
8.2.20-1.fc39
8.2.18-1.fc38
8.2.18-1.fc39
8.3.5-1.fc40
8.2.9-2.fc38
8.1.22-1.fc37
8.2.9-1.fc38
8.1.20-1.fc37
8.2.7-2.fc38
8.1.16-1.fc36
8.1.16-1.fc37
8.1.14-1.fc37
8.1.14-1.fc36
Vulnerabilities (128)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU110260 - Memory corruption CVE-2016-4542 |
CWE-119 | High | 5.6.21-1.fc22, 5.6.21-1.fc24 | 30.10.2018 |
SB2018103059 SB2016042805 SB2016042806 |
||
| #VU110264 - Improper input validation CVE-2016-4538 |
CWE-20 | High | 5.6.21-1.fc22, 5.6.21-1.fc24 | 30.10.2018 |
SB2018103059 SB2016042805 SB2016042806 |
||
| #VU110265 - Improper input validation CVE-2016-4537 |
CWE-20 | High | 5.6.21-1.fc22, 5.6.21-1.fc24 | 30.10.2018 |
SB2018103059 SB2016042805 SB2016042806 |
||
| #VU12327 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-10547 |
CWE-79 | Low | 7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 | 01.05.2018 |
SB2018042612 SB2018050902 SB2018051104 and 12 more |
||
| #VU10800 - Stack-based buffer overflow CVE-2018-7584 |
CWE-121 | Low | 7.1.15-1.fc26, 7.1.15-1.fc27 | 01.03.2018 |
SB2018030106 SB2018030803 SB2018032605 and 10 more |
||
| #VU7349 - NULL Pointer Dereference CVE-2017-9229 |
CWE-476 | Low | 5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 | 06.07.2017 |
SB2017070604 SB2017071001 SB2017081719 and 17 more |
||
| #VU7348 - Out-of-bounds write CVE-2017-9228 |
CWE-787 | High | 5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 | 06.07.2017 |
SB2017070604 SB2017071001 SB2017081719 and 17 more |
||
| #VU7347 - Out-of-bounds read CVE-2017-9227 |
CWE-125 | Low | 5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 | 06.07.2017 |
SB2017070604 SB2017071001 SB2017081719 and 14 more |
||
| #VU7346 - Out-of-bounds write CVE-2017-9226 |
CWE-787 | High | 5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 | 06.07.2017 |
SB2017070604 SB2017071001 SB2017081719 and 14 more |
||
| #VU7345 - Out-of-bounds read CVE-2017-9224 |
CWE-125 | Low | 5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 | 06.07.2017 |
SB2017070604 SB2017071001 SB2017081719 and 15 more |
||
| #VU529 - Improper Access Control CVE-2016-7411 |
CWE-284 | High | 5.6.26-1.fc23, 5.6.26-1.fc24 | 19.09.2016 |
SB2016091801 SB2016092401 SB2016101401 and 8 more |
||
| #VU528 - Improper Access Control CVE-2016-7418 |
CWE-284 | High | 5.6.26-1.fc23, 5.6.26-1.fc24 | 19.09.2016 |
SB2016091801 SB2016092401 SB2016101401 and 9 more |
||
| #VU527 - Improper Access Control CVE-2016-7413 |
CWE-284 | High | 5.6.26-1.fc23, 5.6.26-1.fc24 | 19.09.2016 |
SB2016091801 SB2016092401 SB2016101401 and 9 more |
||
| #VU526 - Improper Access Control CVE-2016-7417 |
CWE-284 | High | 5.6.26-1.fc23, 5.6.26-1.fc24 | 19.09.2016 |
SB2016091801 SB2016092401 SB2016101401 and 9 more |
||
| #VU525 - Improper Access Control CVE-2016-7414 |
CWE-284 | High | 5.6.26-1.fc23, 5.6.26-1.fc24 | 19.09.2016 |
SB2016091801 SB2016092401 SB2016101401 and 9 more |
||
| #VU524 - Improper Access Control CVE-2016-7412 |
CWE-284 | High | 5.6.26-1.fc23, 5.6.26-1.fc24 | 19.09.2016 |
SB2016091801 SB2016092401 SB2016101401 and 9 more |
||
| #VU523 - Improper Access Control CVE-2016-7416 |
CWE-284 | High | 5.6.26-1.fc23, 5.6.26-1.fc24 | 19.09.2016 |
SB2016091801 SB2016092401 SB2016101401 and 9 more |
||
| #VU346 - Server-Side Request Forgery (SSRF) CVE-2016-5385 |
CWE-918 | High | 5.6.24-1.fc23, 5.6.24-2.fc24 | 27.08.2016 |
SB2016071801 SB2016081103 SB2016081104 and 11 more |
||
| #VU194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2016-5385 |
CWE-79 | High | 5.6.24-1.fc23, 5.6.24-2.fc24 | 22.07.2016 |
SB2016072001 SB2016072206 SB2016081103 and 14 more |
||
| #VU33236 - Heap-based Buffer Overflow CVE-2016-1283 |
CWE-122 | High | 7.0.25-1.fc25, 7.1.11-1.fc26, 7.1.11-1.fc27 | 03.01.2016 |
SB2016010301 SB2016050927 SB2016050928 and 8 more |
Showing elements 81 - 100 out of 128