Known vulnerabilities in PHP - page 21

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110507 - Improper input validation
CVE-2005-0524
CWE-20 Medium
No
No
4.2.3, 4.3.11, 5.0.4 03.05.2018 SB2018050326
#VU110508 - Improper input validation
CVE-2005-0525
CWE-20 Medium
No
No
4.2.3, 4.3.11, 5.0.4 03.05.2018 SB2018050326
#VU110529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2003-0442
CWE-79 Medium
Available
No
4.3.2 03.05.2018 SB2018050327
#VU12327 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-10547
CWE-79 Low
No
No
- 01.05.2018 SB2018042612
SB2018050902
SB2018051104
and 12 more
#VU12258 - Memory corruption
CVE-2018-10549
CWE-119 Low
No
No
- 26.04.2018 SB2018042612
SB2018051111
SB2018051702
and 8 more
#VU12257 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-10546
CWE-835 Low
No
No
- 26.04.2018 SB2018042612
SB2018050902
SB2018051104
and 11 more
#VU12256 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-10548
CWE-300 Low
No
No
- 26.04.2018 SB2018042612
SB2018050902
SB2018051104
and 12 more
#VU12255 - Memory corruption
CWE-119 Low
No
No
- 26.04.2018 SB2018042612
#VU11344 - NULL Pointer Dereference
CWE-476 Low
No
No
- 29.03.2018 SB2018032906
#VU11343 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10545
CWE-200 Low
No
No
- 29.03.2018 SB2018032906
SB2018050902
SB2018051104
and 6 more
#VU10880 - Resource exhaustion
CVE-2015-9253
CWE-400 Low
No
No
- 07.03.2018 SB2018021618
SB2018091805
SB2020021722
and 3 more
#VU10820 - Missing release of memory after effective lifetime
CWE-401 Low
No
No
- 02.03.2018 SB2018030106
#VU10800 - Stack-based buffer overflow
CVE-2018-7584
CWE-121 Low
No
No
- 01.03.2018 SB2018030106
SB2018030803
SB2018032605
and 10 more
#VU10390 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-5711
CWE-835 Low
No
No
- 07.02.2018 SB2018020401
SB2018020703
SB2018020902
and 13 more
#VU10389 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5712
CWE-79 Low
No
No
- 06.02.2018 SB2018020401
SB2018020703
SB2018020902
and 14 more
#VU10350 - Missing release of memory after effective lifetime
CWE-401 Low
No
No
- 01.02.2018 SB2018020113
#VU10349 - Improper Access Control
CWE-284 Low
No
No
- 01.02.2018 SB2018020113
#VU10348 - Memory corruption
CWE-119 Low
No
No
- 01.02.2018 SB2018020113
#VU10347 - Memory corruption
CWE-119 Low
No
No
- 01.02.2018 SB2018020113
#VU110531 - Improper input validation
CVE-2003-0172
CWE-20 Medium
Available
No
4.3.2 11.07.2017 SB2018050327


Showing elements 401 - 420 out of 689