Known vulnerabilities in PHP 5 - page 2

Vendor: PHP Group
Software: PHP
Version: 5
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 65
Public exploits: 32
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 5 PHP 5 is affected by 65 vulnerabilities: 2 critical, 11 high, 38 medium, 14 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110479 - Improper input validation
CVE-2006-4020
CWE-20 Low
Public exploit available
No
4.4.4, 4.10, 5.1.5 14.02.2024 SB2018103061
SB2006082901
#VU110490 - Improper input validation
CVE-2006-1490
CWE-20 Medium
Public exploit available
No
4.4.3, 4.10, 5.1.3 13.02.2023 SB2018103061
SB2006050801
#VU110314 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2009-4142
CWE-79 Medium
Public exploit available
No
4.10, 5.2.11 30.10.2018 SB2018103061
SB2010012501
#VU110315 - Improper input validation
CVE-2009-4143
CWE-20 High
No
No
4.10, 5.2.11 30.10.2018 SB2018103061
SB2010012501
#VU110316 - Improper input validation
CVE-2009-2626
CWE-20 Medium
Public exploit available
No
4.10, 5.2.10, 5.3.0 30.10.2018 SB2018103061
#VU110317 - Permissions, Privileges, and Access Controls
CVE-2009-4018
CWE-264 Medium
Public exploit available
No
4.10, 5.2.10, 5.3.0 30.10.2018 SB2018103061
#VU110321 - Improper input validation
CVE-2009-3291
CWE-20 Medium
No
No
4.10, 5.2.10 30.10.2018 SB2018103061
SB2009100401
#VU110416 - Improper input validation
CVE-2007-1835
CWE-20 Low
Public exploit available
No
4.4.7, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110470 - Improper input validation
CVE-2006-4625
CWE-20 Low
Public exploit available
No
4.4.5, 4.10 30.10.2018 SB2018103061
#VU110477 - Improper input validation
CVE-2006-4433
CWE-20 Medium
No
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110487 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2006-1494
CWE-22 Low
Public exploit available
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110488 - Improper input validation
CVE-2006-1608
CWE-20 Low
Public exploit available
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110492 - Improper input validation
CVE-2006-1015
CWE-20 Medium
Public exploit available
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110493 - Improper input validation
CVE-2006-1017
CWE-20 High
No
No
4.4.4, 4.10, 5.1.5 30.10.2018 SB2018103061
#VU110498 - Improper input validation
CVE-2005-3883
CWE-20 Medium
No
No
4.4.2, 4.10 30.10.2018 SB2018103061
#VU110502 - Improper input validation
CVE-2005-3390
CWE-20 Medium
Public exploit available
No
4.4.0, 4.10 30.10.2018 SB2018103061
SB2005111301
#VU110505 - Improper input validation
CVE-2005-3319
CWE-20 Low
No
No
4.4.0, 4.10 30.10.2018 SB2018103061
SB2005111301
#VU110513 - Improper input validation
CVE-2004-1019
CWE-20 High
No
No
4.3.10, 4.10, 5.0.3 30.10.2018 SB2018103061
#VU110517 - Improper input validation
CVE-2004-1065
CWE-20 High
No
No
4.3.10, 4.10, 5.0.3 30.10.2018 SB2018103061
SB2004121901
#VU110523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2004-0595
CWE-79 Medium
Public exploit available
No
4.3.8, 4.10 30.10.2018 SB2018103061


Showing elements 21 - 40 out of 65