Known vulnerabilities in PHP - page 11

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110265 - Improper input validation
CVE-2016-4537
CWE-20 High
No
No
5.6.21, 7.0.6 30.10.2018 SB2018103059
SB2016042805
SB2016042806
#VU110268 - Memory corruption
CVE-2016-4342
CWE-119 High
No
No
5.6.18, 7.0.3 30.10.2018 SB2018103060
#VU110336 - Improper input validation
CVE-2008-4107
CWE-20 Medium
No
No
4.4.8, 4.10, 5.2.5 30.10.2018 SB2018103061
#VU110280 - Improper input validation
CVE-2010-4409
CWE-20 Medium
Available
No
4.10, 5.3.3 30.10.2018 SB2018103061
SB2011101004
#VU110281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2009-5016
CWE-79 Medium
No
No
4.10, 5.2.2 30.10.2018 SB2018103061
SB2011101004
#VU110314 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2009-4142
CWE-79 Medium
Available
No
4.10, 5.2.11 30.10.2018 SB2018103061
SB2010012501
#VU110315 - Improper input validation
CVE-2009-4143
CWE-20 High
No
No
4.10, 5.2.11 30.10.2018 SB2018103061
SB2010012501
#VU110316 - Improper input validation
CVE-2009-2626
CWE-20 Medium
Available
No
4.10, 5.2.10, 5.3.0 30.10.2018 SB2018103061
#VU110317 - Permissions, Privileges, and Access Controls
CVE-2009-4018
CWE-264 Medium
Available
No
4.10, 5.2.10, 5.3.0 30.10.2018 SB2018103061
#VU110319 - Permissions, Privileges, and Access Controls
CVE-2009-3557
CWE-264 Medium
No
No
4.10, 5.0.4, 5.1.2, 5.2.11, 5.3.0 30.10.2018 SB2018103061
SB2010012501
#VU110320 - Permissions, Privileges, and Access Controls
CVE-2009-3558
CWE-264 Medium
No
No
4.10, 5.0.4, 5.1.2, 5.2.7, 5.3.0 30.10.2018 SB2018103061
SB2010012501
#VU110321 - Improper input validation
CVE-2009-3291
CWE-20 Medium
No
No
4.10, 5.2.10 30.10.2018 SB2018103061
SB2009100401
#VU110322 - Improper input validation
CVE-2009-3292
CWE-20 Medium
No
No
4.10, 5.2.10 30.10.2018 SB2018103061
SB2009100401
#VU110323 - Improper input validation
CVE-2009-3293
CWE-20 Medium
No
No
4.10, 5.2.10 30.10.2018 SB2018103061
SB2009100401
#VU110324 - Improper input validation
CVE-2008-7068
CWE-20 Medium
No
No
4.10, 5.2.7 30.10.2018 SB2018103061
#VU110330 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2008-5814
CWE-79 Low
No
No
4.10, 5.2.7 30.10.2018 SB2018103061
#VU110396 - Improper input validation
CVE-2007-2844
CWE-20 High
No
No
4.4.7, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110369 - Improper input validation
CVE-2007-4658
CWE-20 Medium
No
No
4.4.8, 4.10, 5.2.15 03.10.2018 SB2018103061
#VU110388 - Improper input validation
CVE-2007-3799
CWE-20 Medium
Available
No
4.4.8, 4.10, 5.2.15 03.10.2018 SB2018103061
#VU110375 - Improper Link Resolution Before File Access ('Link Following')
CVE-2007-4652
CWE-59 Low
Available
No
4.10, 5.2.3 29.07.2017 SB2018103061


Showing elements 201 - 220 out of 689