Known vulnerabilities in PHP 5.4.2 - page 2

Vendor: PHP Group
Software: PHP
Version: 5.4.2
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 35
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 5.4.2 PHP 5.4.2 is affected by 35 vulnerabilities: 4 critical, 3 high, 19 medium, 9 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5939 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-2311
CWE-78 Critical
Public exploit available
No
- 14.03.2017 SB2012050601
SB2015050401
SB2012050701
and 5 more
#VU4197 - Heap-based Buffer Overflow
CVE-2012-2688
CWE-122 Critical
No
No
- 11.01.2017 SB2012071901
SB2012072301
SB2012080501
and 4 more
#VU4156 - Memory corruption
CVE-2012-2376
CWE-119 Critical
Public exploit available
No
- 11.01.2017 SB2012051101
#VU32548 - Permissions, Privileges, and Access Controls
CVE-2013-7345
CWE-264 Medium
No
No
- 24.03.2014 SB2014032402
SB2014041813
SB2014072304
and 8 more
#VU33295 - NULL Pointer Dereference
CVE-2014-2497
CWE-476 Medium
No
No
5.4.27 21.03.2014 SB2014032102
SB2014090109
SB2014070709
and 8 more
#VU42031 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1171
CWE-200 Medium
No
No
- 15.02.2014 SB2014021503
#VU42670 - Permissions, Privileges, and Access Controls
CVE-2011-4718
CWE-264 Medium
No
No
- 13.08.2013 SB2013081301
SB2014082910
#VU42772 - Improper input validation
CVE-2013-4635
CWE-20 Medium
No
No
- 22.06.2013 SB2013062102
SB2013080902
SB2013080903
and 4 more
#VU42773 - Improper input validation
CVE-2013-4636
CWE-20 Medium
No
No
- 22.06.2013 SB2013062102
SB2014082910
#VU42774 - Heap-based Buffer Overflow
CVE-2013-2110
CWE-122 Medium
No
No
- 21.06.2013 SB2013062102
SB2013062401
SB2013062402
and 2 more
#VU43771 - Improper input validation
CVE-2012-3450
CWE-20 Low
Public exploit available
No
- 06.08.2012 SB2012080605
SB2012082402
SB2012092403
#VU43908 - Heap-based Buffer Overflow
CVE-2012-2386
CWE-122 Medium
Public exploit available
No
- 07.07.2012 SB2012051102
SB2012070502
SB2012070509
and 1 more
#VU44085 - Memory corruption
CVE-2012-2329
CWE-119 Medium
Public exploit available
No
- 11.05.2012 SB2012051102
#VU44086 - Permissions, Privileges, and Access Controls
CVE-2012-2335
CWE-264 Medium
No
No
- 11.05.2012 SB2012051102
SB2012070502
SB2012060902
and 1 more
#VU44087 - Improper input validation
CVE-2012-2336
CWE-20 Medium
No
No
- 11.05.2012 SB2012051102
SB2012070502
SB2012060902
and 1 more


Showing elements 21 - 40 out of 35