Known vulnerabilities in PHP 5 - page 3

Vendor: PHP Group
Software: PHP
Version: 5
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 65
Public exploits: 32
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 5 PHP 5 is affected by 65 vulnerabilities: 2 critical, 11 high, 38 medium, 14 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110322 - Improper input validation
CVE-2009-3292
CWE-20 Medium
No
No
4.10, 5.2.10 30.10.2018 SB2018103061
SB2009100401
#VU110323 - Improper input validation
CVE-2009-3293
CWE-20 Medium
No
No
4.10, 5.2.10 30.10.2018 SB2018103061
SB2009100401
#VU110330 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2008-5814
CWE-79 Low
No
No
4.10, 5.2.7 30.10.2018 SB2018103061
#VU110396 - Improper input validation
CVE-2007-2844
CWE-20 High
No
No
4.4.7, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110402 - Improper input validation
CVE-2007-2509
CWE-20 Low
No
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
SB2007052601
#VU110403 - Memory corruption
CVE-2007-2510
CWE-119 Medium
No
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
SB2007052601
#VU110404 - Improper input validation
CVE-2007-2511
CWE-20 Low
No
No
4.4.7, 4.10, 5.0.1 30.10.2018 SB2018103061
SB2007052601
#VU110407 - Improper input validation
CVE-2007-1883
CWE-20 Medium
No
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
#VU110409 - Improper input validation
CVE-2007-1885
CWE-20 Medium
No
No
4.4.7, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110412 - Improper input validation
CVE-2007-1888
CWE-20 Medium
No
No
4.4.7, 4.10, 5.2.2, 5.4.0 30.10.2018 SB2018103061
#VU110414 - Improper input validation
CVE-2007-1890
CWE-20 Medium
Public exploit available
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110466 - Improper input validation
CVE-2006-5706
CWE-20 Low
No
No
5.1.6 30.10.2018 SB2018103062
#VU110467 - Improper input validation
CVE-2006-5465
CWE-20 Medium
No
No
5.1.6 30.10.2018 SB2018103062
SB2007032001
#VU110495 - Improper Control of Generation of Code ('Code Injection')
CVE-2006-0207
CWE-94 Medium
No
No
5.1.2 30.10.2018 SB2018103066
SB2006032202
#VU110491 - Improper input validation
CVE-2006-1014
CWE-20 Low
Public exploit available
No
4.0.1, 4.2.0, 4.4.2, 5.1.1 18.10.2018 SB2018101522
#VU110344 - Improper input validation
CVE-2008-2107
CWE-20 Medium
No
No
5.2.5 11.10.2018 SB2018101124
#VU7685 - Missing release of memory after effective lifetime
CWE-401 Low
No
No
- 03.08.2017 SB2017080312
#VU7684 - Integer overflow
CWE-190 High
No
No
- 03.08.2017 SB2017080312
#VU7683 - Use After Free
CWE-416 Low
No
No
- 03.08.2017 SB2017080312
#VU110436 - Improper input validation
CVE-2007-1452
CWE-20 Medium
Public exploit available
No
5.2.0 05.09.2008 SB2017072918


Showing elements 41 - 60 out of 65