Known vulnerabilities in PHP 5.1.6 - page 4

Vendor: PHP Group
Software: PHP
Version: 5.1.6
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 98
Public exploits: 37
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 5.1.6 PHP 5.1.6 is affected by 98 vulnerabilities: 3 critical, 10 high, 73 medium, 12 low Critical High Medium Low

Vulnerabilities (98)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5939 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-2311
CWE-78 Critical
Public exploit available
No
- 14.03.2017 SB2012050601
SB2015050401
SB2012050701
and 5 more
#VU4201 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-1823
CWE-78 Critical
Public exploit available
Exploited
8.3.8 11.01.2017 SB2012050301
SB2015050401
SB2012050901
and 11 more
#VU10333 - UNIX Symbolic Link (Symlink) Following
CVE-2014-5459
CWE-61 Low
No
No
- 27.09.2014 SB2014082701
#VU32500 - Improper input validation
CVE-2014-3538
CWE-20 Medium
No
No
- 03.07.2014 SB2014070302
SB2014072101
SB2014072102
and 2 more
#VU32548 - Permissions, Privileges, and Access Controls
CVE-2013-7345
CWE-264 Medium
No
No
- 24.03.2014 SB2014032402
SB2014041813
SB2014072304
and 8 more
#VU42031 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1171
CWE-200 Medium
No
No
- 15.02.2014 SB2014021503
#VU42670 - Permissions, Privileges, and Access Controls
CVE-2011-4718
CWE-264 Medium
No
No
- 13.08.2013 SB2013081301
SB2014082910
#VU42772 - Improper input validation
CVE-2013-4635
CWE-20 Medium
No
No
- 22.06.2013 SB2013062102
SB2013080902
SB2013080903
and 4 more
#VU42774 - Heap-based Buffer Overflow
CVE-2013-2110
CWE-122 Medium
No
No
- 21.06.2013 SB2013062102
SB2013062401
SB2013062402
and 2 more
#VU43908 - Heap-based Buffer Overflow
CVE-2012-2386
CWE-122 Medium
Public exploit available
No
- 07.07.2012 SB2012051102
SB2012070502
SB2012070509
and 1 more
#VU44053 - Improper input validation
CVE-2012-1172
CWE-20 Medium
No
No
- 24.05.2012 SB2012052401
SB2012050904
SB2012050905
and 3 more
#VU44087 - Improper input validation
CVE-2012-2336
CWE-20 Medium
No
No
- 11.05.2012 SB2012051102
SB2012070502
SB2012060902
and 1 more
#VU44297 - Improper input validation
CVE-2012-0788
CWE-20 Medium
Public exploit available
No
- 14.02.2012 SB2012020206
SB2012092403
#VU44298 - Missing release of memory after effective lifetime
CVE-2012-0789
CWE-401 Medium
Public exploit available
No
- 14.02.2012 SB2012020206
SB2012092403
#VU44303 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-0831
CWE-89 Medium
No
No
- 10.02.2012 SB2012021001
SB2012092403
#VU44347 - Permissions, Privileges, and Access Controls
CVE-2012-0057
CWE-264 Medium
No
No
- 02.02.2012 SB2012020206
SB2012092403
#VU44779 - Resource Management Errors
CVE-2011-3267
CWE-399 Medium
No
No
- 25.08.2011 SB2011021901
SB2011101004
#VU44780 - Memory corruption
CVE-2011-3268
CWE-119 High
No
No
- 25.08.2011 SB2011021901
SB2011101004
#VU44783 - Improper input validation
CVE-2011-3182
CWE-20 Medium
Public exploit available
No
- 25.08.2011 SB2011021901
SB2011101004
#VU45390 - Improper input validation
CVE-2011-0752
CWE-20 Medium
No
No
- 03.02.2011 SB2011020304
SB2011101004


Showing elements 61 - 80 out of 98