Known vulnerabilities in PHP - page 14

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110479 - Improper input validation
CVE-2006-4020
CWE-20 Low
Available
No
4.4.4, 4.10, 5.1.5 14.02.2024 SB2018103061
SB2006082901
#VU110490 - Improper input validation
CVE-2006-1490
CWE-20 Medium
Available
No
4.4.3, 4.10, 5.1.3 13.02.2023 SB2018103061
SB2006050801
#VU110500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2005-3388
CWE-79 Medium
Available
No
4.4.0, 4.10 23.06.2020 SB2018103061
SB2005111301
SB2020061640
#VU110487 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2006-1494
CWE-22 Low
Available
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110488 - Improper input validation
CVE-2006-1608
CWE-20 Low
Available
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110492 - Improper input validation
CVE-2006-1015
CWE-20 Medium
Available
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110493 - Improper input validation
CVE-2006-1017
CWE-20 High
No
No
4.4.4, 4.10, 5.1.5 30.10.2018 SB2018103061
#VU110498 - Improper input validation
CVE-2005-3883
CWE-20 Medium
No
No
4.4.2, 4.10 30.10.2018 SB2018103061
#VU110501 - Improper input validation
CVE-2005-3389
CWE-20 Medium
No
No
4.4.0, 4.10 30.10.2018 SB2018103061
SB2005111301
#VU110502 - Improper input validation
CVE-2005-3390
CWE-20 Medium
Available
No
4.4.0, 4.10 30.10.2018 SB2018103061
SB2005111301
#VU110503 - Improper input validation
CVE-2005-3391
CWE-20 Medium
No
No
4.4.0, 4.10 30.10.2018 SB2018103061
SB2005111301
#VU110504 - Improper input validation
CVE-2005-3392
CWE-20 Medium
No
No
4.4.0, 4.10 30.10.2018 SB2018103061
SB2005111301
#VU110505 - Improper input validation
CVE-2005-3319
CWE-20 Low
No
No
4.4.0, 4.10 30.10.2018 SB2018103061
SB2005111301
#VU110513 - Improper input validation
CVE-2004-1019
CWE-20 High
No
No
4.3.10, 4.10, 5.0.3 30.10.2018 SB2018103061
#VU110517 - Improper input validation
CVE-2004-1065
CWE-20 High
No
No
4.3.10, 4.10, 5.0.3 30.10.2018 SB2018103061
SB2004121901
#VU110523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2004-0595
CWE-79 Medium
Available
No
4.3.8, 4.10 30.10.2018 SB2018103061
#VU110526 - Improper input validation
CVE-2003-0860
CWE-20 High
No
No
4.3.3, 4.10 30.10.2018 SB2018103061
#VU110527 - Improper input validation
CVE-2003-0861
CWE-20 High
No
No
4.3.3, 4.10 30.10.2018 SB2018103061
#VU110530 - Improper input validation
CVE-2003-0166
CWE-20 Medium
Available
No
4.3.2, 4.10 30.10.2018 SB2018103061
#VU110480 - Permissions, Privileges, and Access Controls
CVE-2006-3011
CWE-264 Low
No
No
4.4.3, 4.10 20.07.2017 SB2018103061


Showing elements 261 - 280 out of 695