Known vulnerabilities in php - page 2

Vendor: OpenAnolis
Software: php
Software CPE: cpe:2.3:o:openanolis:php:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 53
Public exploits: 11
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php php is affected by 53 known vulnerabilities: 2 critical, 12 high, 32 medium, 7 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100674 - Buffer over-read
CVE-2024-11233		 CWE-126 Medium
No
No
 7.4.33-3.0.1, 8.2.27-1 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 16 more
#VU100673 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-11234		 CWE-93 Medium
No
No
 7.4.33-3.0.1, 8.2.27-1 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100672 - Integer overflow
CVE-2024-11236		 CWE-190 High
No
No
 8.2.26-1 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 12 more
#VU100671 - Buffer over-read
CVE-2024-8929		 CWE-126 Medium
No
No
 7.4.33-3.0.1, 8.2.27-1 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100670 - Out-of-bounds read
CVE-2024-8932		 CWE-125 Medium
No
No
 8.2.26-1 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 11 more
#VU97748 - Improper input validation
CVE-2024-8925		 CWE-20 Medium
No
No
 7.4.33-2.0.1 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 16 more
#VU97747 - Insufficient Logging
CVE-2024-9026		 CWE-778 Low
No
No
 7.4.33-2.0.1 27.09.2024 SB2024092724
SB2024100148
SB2024101209
and 13 more
#VU97746 - Security Features
CVE-2024-8927		 CWE-254 Medium
No
No
 7.4.33-2.0.1, 8.2.24-1 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 18 more
#VU97691 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-8926		 CWE-78 High
Available
No
 8.2.24-1 25.09.2024 SB2024092519
SB2024092520
SB2024092524
and 7 more
#VU91109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-5585		 CWE-78 Medium
No
No
 8.2.20-1 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 8 more
#VU91107 - Improper input validation
CVE-2024-5458		 CWE-20 Medium
No
No
 7.4.33-2.0.1 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 18 more
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577		 CWE-78 Critical
Available
Exploited
 8.2.24-1 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU88484 - Improper Authentication
CVE-2024-3096		 CWE-287 High
No
No
 7.4.33-2.0.1, 8.2.20-1 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 25 more
#VU88483 - Security Features
CVE-2024-2756		 CWE-254 Low
No
No
 7.4.33-2.0.1, 8.2.20-1 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 24 more
#VU88482 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-1874		 CWE-78 Medium
Available
No
 8.2.20-1 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 7 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823		 CWE-611 High
No
No
 7.4.33-2.0.1, 8.0.30-1.0.1, 8.2.10-1 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247		 CWE-330 Medium
No
No
 7.4.33-2.0.1, 8.0.30-1.0.1 09.06.2023 SB2023060919
SB2023061105
SB2023061516
and 24 more
#VU72167 - Out-of-bounds write
CVE-2023-0568		 CWE-787 Medium
No
No
 7.4.33-2.0.1, 8.0.30-1.0.1 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72166 - Use of Insufficiently Random Values
CVE-2023-0567		 CWE-330 Medium
No
No
 7.4.33-2.0.1, 8.0.30-1.0.1 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 23 more
#VU72165 - Improper input validation
CVE-2023-0662		 CWE-20 Medium
No
No
 8.0.30-1.0.1 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more


Showing elements 21 - 40 out of 53