Known vulnerabilities in php-sodium - page 2

Vendor: openEuler
Software: php-sodium
Software CPE: cpe:2.3:o:openeuler:php-sodium:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 48
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php-sodium php-sodium is affected by 48 known vulnerabilities: 2 critical, 8 high, 32 medium, 6 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105644 - Improper input validation
CVE-2025-1217		 CWE-20 Medium
No
No
 8.0.30-9, 8.3.19-1 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105643 - Improper input validation
CVE-2025-1734		 CWE-20 Medium
No
No
 8.0.30-9, 8.3.19-1 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105641 - Improper Authentication
CVE-2025-1736		 CWE-287 Medium
No
No
 8.0.30-9, 8.3.19-1 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105640 - Resource Management Errors
CVE-2025-1219		 CWE-399 Low
No
No
 8.0.30-9, 8.3.19-1 12.03.2025 SB2025031231
SB2025031232
SB2025031233
and 20 more
#VU100674 - Buffer over-read
CVE-2024-11233		 CWE-126 Medium
No
No
 8.0.30-7 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 16 more
#VU100673 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-11234		 CWE-93 Medium
No
No
 8.0.30-7 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100672 - Integer overflow
CVE-2024-11236		 CWE-190 High
No
No
 8.0.30-7 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 12 more
#VU100671 - Buffer over-read
CVE-2024-8929		 CWE-126 Medium
No
No
 8.0.30-7 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100670 - Out-of-bounds read
CVE-2024-8932		 CWE-125 Medium
No
No
 8.0.30-7 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 11 more
#VU97748 - Improper input validation
CVE-2024-8925		 CWE-20 Medium
No
No
 8.0.30-6 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 16 more
#VU97747 - Insufficient Logging
CVE-2024-9026		 CWE-778 Low
No
No
 8.0.30-6 27.09.2024 SB2024092724
SB2024100148
SB2024101209
and 13 more
#VU97746 - Security Features
CVE-2024-8927		 CWE-254 Medium
No
No
 8.0.30-6 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 18 more
#VU97691 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-8926		 CWE-78 High
Available
No
 8.0.30-6 25.09.2024 SB2024092519
SB2024092520
SB2024092524
and 7 more
#VU91107 - Improper input validation
CVE-2024-5458		 CWE-20 Medium
No
No
 8.0.30-4 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 18 more
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577		 CWE-78 Critical
Available
Exploited
 8.0.30-6 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU88484 - Improper Authentication
CVE-2024-3096		 CWE-287 High
No
No
 8.0.30-3 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 25 more
#VU88483 - Security Features
CVE-2024-2756		 CWE-254 Low
No
No
 8.0.30-5 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 24 more
#VU72166 - Use of Insufficiently Random Values
CVE-2023-0567		 CWE-330 Medium
No
No
 7.2.34-3, 8.0.30-1 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 23 more
#VU70788 - Integer overflow
CVE-2022-31631		 CWE-190 Medium
No
No
 7.2.34-3, 8.0.30-1 07.01.2023 SB2023010702
SB2023010704
SB2023011201
and 21 more
#VU68886 - Out-of-bounds read
CVE-2022-31630		 CWE-125 Medium
No
No
 8.0.30-1 01.11.2022 SB2022110119
SB2022110336
SB2022110814
and 21 more


Showing elements 21 - 40 out of 48