Known vulnerabilities in PHP - page 15

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110473 - Missing Authorization
CVE-2006-4483
CWE-862 High
No
No
5.1.5 19.07.2022 SB2018103063
#VU110472 - Out-of-bounds write
CVE-2006-4482
CWE-787 High
No
No
5.1.5 19.07.2022 SB2018103063
#VU110466 - Improper input validation
CVE-2006-5706
CWE-20 Low
No
No
5.1.6 30.10.2018 SB2018103062
#VU110467 - Improper input validation
CVE-2006-5465
CWE-20 Medium
No
No
5.1.6 30.10.2018 SB2018103062
SB2007032001
#VU110471 - Improper input validation
CVE-2006-4481
CWE-20 Low
No
No
5.1.5 30.10.2018 SB2018103063
#VU110474 - Improper input validation
CVE-2006-4484
CWE-20 Low
No
No
5.1.5 30.10.2018 SB2018103063
#VU110475 - Improper input validation
CVE-2006-4485
CWE-20 High
No
No
5.1.5 30.10.2018 SB2018103063
#VU110476 - Improper input validation
CVE-2006-4486
CWE-20 Low
No
No
5.1.6 30.10.2018 SB2018103062
#VU110481 - Improper input validation
CVE-2006-3017
CWE-20 High
No
No
5.1.3 30.10.2018 SB2018103064
#VU110482 - Improper input validation
CVE-2006-2660
CWE-20 Low
No
No
4.0.6, 4.4.4, 4.10, 5.1.5 30.10.2018 SB2018103065
#VU110494 - Use of Externally-Controlled Format String
CVE-2006-0200
CWE-134 High
No
No
5.1.2 30.10.2018 SB2018103066
#VU110495 - Improper Control of Generation of Code ('Code Injection')
CVE-2006-0207
CWE-94 Medium
No
No
5.1.2 30.10.2018 SB2018103066
SB2006032202
#VU110496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2006-0208
CWE-79 Low
No
No
4.0.7, 4.4.3, 4.10, 5.1.2 30.10.2018 SB2018103067
SB2006032202
#VU110499 - Improper input validation
CVE-2005-3353
CWE-20 Medium
No
No
4.0.7, 4.4.0, 4.10 30.10.2018 SB2018103067
#VU110525 - Improper input validation
CVE-2003-1303
CWE-20 Medium
No
No
4.3.3 30.10.2018 SB2018103068
#VU110532 - Improper input validation
CVE-2003-0097
CWE-20 Medium
No
No
4.3.1 30.10.2018 SB2018103069
#VU110485 - Resource Management Errors
CVE-2006-1991
CWE-399 Medium
No
No
5.1.3 20.07.2017 SB2018103064
SB2006050801
#VU110543 - Improper input validation
CVE-2002-0253
CWE-20 Medium
No
No
4.0.7, 4.10 18.10.2016 SB2018103067
#VU110547 - Permissions, Privileges, and Access Controls
CVE-2001-1247
CWE-264 Medium
No
No
4.0.6 25.06.2012 SB2018103065
#VU110545 - Improper input validation
CVE-2002-0121
CWE-20 Low
No
No
4.0.7, 4.10 11.09.2008 SB2018103067


Showing elements 281 - 300 out of 689