Known vulnerabilities in PHP - page 10

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16328 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16327 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16326 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16325 - Missing release of memory after effective lifetime
CWE-401 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16324 - Improper Restriction of XML External Entity Reference ('XXE')
CWE-611 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16067 - Command injection
CVE-2018-19518
CWE-77 Low
Available
No
- 27.11.2018 SB2018112208
SB2018121008
SB2018121011
and 8 more
#VU16019 - NULL Pointer Dereference
CVE-2018-19396
CWE-476 Low
No
No
- 22.11.2018 SB2018112208
SB2018072429
#VU16018 - NULL Pointer Dereference
CVE-2018-19395
CWE-476 Low
No
No
- 21.11.2018 SB2018112208
SB2018072428
#VU15778 - Heap-based Buffer Overflow
CWE-122 Low
No
No
7.2.12 09.11.2018 SB2018110901
#VU15777 - Heap-based Buffer Overflow
CWE-122 Low
No
No
7.2.12 09.11.2018 SB2018110901
#VU15776 - Memory corruption
CWE-119 Low
No
No
7.2.12 09.11.2018 SB2018110901
#VU15775 - Improper Restriction of XML External Entity Reference ('XXE')
CWE-611 Low
No
No
7.1.24, 7.2.12 09.11.2018 SB2018110901
#VU110259 - Memory corruption
CVE-2016-4543
CWE-119 High
No
No
5.6.21, 7.0.6 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU110260 - Memory corruption
CVE-2016-4542
CWE-119 High
No
No
5.6.21, 7.0.6 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU110261 - Improper input validation
CVE-2016-4541
CWE-20 High
No
No
5.6.21, 7.0.6 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU110262 - Improper input validation
CVE-2016-4540
CWE-20 High
No
No
5.6.21, 7.0.6 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU110263 - Memory corruption
CVE-2016-4539
CWE-119 High
No
No
5.6.21, 7.0.6 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU110264 - Improper input validation
CVE-2016-4538
CWE-20 High
No
No
5.6.21, 7.0.6 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU110356 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2007-5653
CWE-78 High
Available
No
5.0 29.09.2017 SB2018110514
#VU110452 - Memory corruption
CVE-2007-1381
CWE-119 High
Available
No
5.0 05.09.2008 SB2018110514


Showing elements 181 - 200 out of 689