Known vulnerabilities in php - page 5

Software: php
Software CPE: cpe:2.3:o:fedoraproject:php:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 128
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php php is affected by 128 known vulnerabilities: 2 critical, 47 high, 43 medium, 36 low Critical High Medium Low

Vulnerabilities (128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110260 - Memory corruption
CVE-2016-4542
CWE-119 High
No
No
5.6.21-1.fc22, 5.6.21-1.fc24 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU110264 - Improper input validation
CVE-2016-4538
CWE-20 High
No
No
5.6.21-1.fc22, 5.6.21-1.fc24 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU110265 - Improper input validation
CVE-2016-4537
CWE-20 High
No
No
5.6.21-1.fc22, 5.6.21-1.fc24 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU12327 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-10547
CWE-79 Low
No
No
7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28 01.05.2018 SB2018042612
SB2018050902
SB2018051104
and 12 more
#VU10800 - Stack-based buffer overflow
CVE-2018-7584
CWE-121 Low
No
No
7.1.15-1.fc26, 7.1.15-1.fc27 01.03.2018 SB2018030106
SB2018030803
SB2018032605
and 10 more
#VU7349 - NULL Pointer Dereference
CVE-2017-9229
CWE-476 Low
No
No
5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7348 - Out-of-bounds write
CVE-2017-9228
CWE-787 High
No
No
5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7347 - Out-of-bounds read
CVE-2017-9227
CWE-125 Low
No
No
5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7346 - Out-of-bounds write
CVE-2017-9226
CWE-787 High
No
No
5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7345 - Out-of-bounds read
CVE-2017-9224
CWE-125 Low
No
No
5.6.31-1.fc24, 7.0.21-1.fc25, 7.1.7-1.fc26 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 15 more
#VU529 - Improper Access Control
CVE-2016-7411
CWE-284 High
No
No
5.6.26-1.fc23, 5.6.26-1.fc24 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 8 more
#VU528 - Improper Access Control
CVE-2016-7418
CWE-284 High
No
No
5.6.26-1.fc23, 5.6.26-1.fc24 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU527 - Improper Access Control
CVE-2016-7413
CWE-284 High
No
No
5.6.26-1.fc23, 5.6.26-1.fc24 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU526 - Improper Access Control
CVE-2016-7417
CWE-284 High
No
No
5.6.26-1.fc23, 5.6.26-1.fc24 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU525 - Improper Access Control
CVE-2016-7414
CWE-284 High
No
No
5.6.26-1.fc23, 5.6.26-1.fc24 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU524 - Improper Access Control
CVE-2016-7412
CWE-284 High
No
No
5.6.26-1.fc23, 5.6.26-1.fc24 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU523 - Improper Access Control
CVE-2016-7416
CWE-284 High
No
No
5.6.26-1.fc23, 5.6.26-1.fc24 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU346 - Server-Side Request Forgery (SSRF)
CVE-2016-5385
CWE-918 High
No
No
5.6.24-1.fc23, 5.6.24-2.fc24 27.08.2016 SB2016071801
SB2016081103
SB2016081104
and 11 more
#VU194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5385
CWE-79 High
No
No
5.6.24-1.fc23, 5.6.24-2.fc24 22.07.2016 SB2016072001
SB2016072206
SB2016081103
and 14 more
#VU33236 - Heap-based Buffer Overflow
CVE-2016-1283
CWE-122 High
No
No
7.0.25-1.fc25, 7.1.11-1.fc26, 7.1.11-1.fc27 03.01.2016 SB2016010301
SB2016050927
SB2016050928
and 8 more


Showing elements 81 - 100 out of 128