Known vulnerabilities in PHP - page 19

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110345 - Insufficient Entropy
CVE-2008-2108
CWE-331 High
No
No
5.2.5 15.02.2024 SB2018101124
#VU110347 - Memory corruption
CVE-2008-2050
CWE-119 High
No
No
5.2.5 13.02.2023 SB2018101124
#VU110355 - Permissions, Privileges, and Access Controls
CVE-2007-5900
CWE-264 Low
No
No
5.2.5 15.10.2018 SB2018101124
#VU110352 - Exposure of sensitive information to an unauthorized actor
CVE-2007-5899
CWE-200 Medium
No
No
5.2.5 15.10.2018 SB2018101124
#VU110354 - Improper input validation
CVE-2007-5898
CWE-20 Medium
No
No
5.2.5 15.10.2018 SB2018101124
#VU110360 - Improper input validation
CVE-2007-4889
CWE-20 Medium
No
No
5.2.5 15.10.2018 SB2018101124
#VU110361 - Improper input validation
CVE-2007-4887
CWE-20 Medium
No
No
5.2.5 15.10.2018 SB2018101124
#VU110362 - Improper input validation
CVE-2007-4840
CWE-20 Medium
No
No
5.2.5 15.10.2018 SB2018101124
#VU110363 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4825
CWE-22 Medium
No
No
5.2.5 15.10.2018 SB2018101124
#VU110365 - Improper input validation
CVE-2007-4783
CWE-20 Medium
No
No
5.2.5 15.10.2018 SB2018101124
#VU15333 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.1.23 12.10.2018 SB2018101204
#VU15332 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.2.11 12.10.2018 SB2018101204
#VU110337 - Improper input validation
CVE-2008-3658
CWE-20 Medium
No
No
4.4.9, 5.2.7 11.10.2018 SB2018101123
#VU110338 - Improper input validation
CVE-2008-3659
CWE-20 Medium
No
No
4.4.9, 5.2.7 11.10.2018 SB2018101123
#VU110339 - Improper input validation
CVE-2008-3660
CWE-20 Medium
No
No
4.4.9, 5.2.7 11.10.2018 SB2018101123
#VU110344 - Improper input validation
CVE-2008-2107
CWE-20 Medium
No
No
5.2.5 11.10.2018 SB2018101124
#VU110348 - Improper input validation
CVE-2008-2051
CWE-20 High
No
No
5.2.5 11.10.2018 SB2018101124
#VU15293 - Missing release of memory after effective lifetime
CWE-401 Low
No
No
7.1.22, 7.2.10 10.10.2018 SB2018101016
#VU15292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17082
CWE-79 Low
No
No
5.6.38, 7.0.32 10.10.2018 SB2018101016
SB2018100601
SB2018100602
and 9 more
#VU110357 - Permissions, Privileges, and Access Controls
CVE-2007-5447
CWE-264 Medium
Available
No
5.2.5 29.09.2017 SB2018101124


Showing elements 361 - 380 out of 695