Known vulnerabilities in PHP - page 22

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110524 - Improper input validation
CVE-2003-1302
CWE-20 Medium
No
No
4.3.0 30.10.2018 SB2017101144
#VU110455 - Improper input validation
CVE-2007-1286
CWE-20 Medium
Available
Exploited
4.4.5 16.10.2018 SB2017101145
SB2007032001
SB2007052601
#VU10351 - Improper input validation
CWE-20 Low
No
No
- 01.02.2018 SB2018020113
#VU9869 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5712
CWE-79 Low
No
No
- 04.01.2018 SB2018010412
SB2018011109
#VU9868 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-5711
CWE-835 Low
No
No
- 04.01.2018 SB2018010412
SB2018011109
#VU9467 - Type confusion
CWE-843 Low
No
No
- 30.11.2017 SB2017113007
#VU9466 - Improper input validation
CWE-20 Low
No
No
- 30.11.2017 SB2017113007
#VU9465 - Deserialization of Untrusted Data
CWE-502 Low
No
No
- 30.11.2017 SB2017113007
#VU9464 - Buffer overflow
CWE-120 Low
No
No
- 30.11.2017 SB2017113007
#VU9407 - Missing release of memory after effective lifetime
CWE-401 Low
No
No
- 23.11.2017 SB2017112302
#VU9406 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
- 23.11.2017 SB2017112302
#VU9405 - Improper Access Control
CWE-284 Low
No
No
- 23.11.2017 SB2017112302
#VU8969 - Memory corruption
CWE-119 Low
No
No
- 27.10.2017 SB2017102708
#VU8968 - Out-of-bounds read
CVE-2017-16642
CWE-125 Low
Available
No
- 27.10.2017 SB2017102708
SB2018011105
SB2018011106
and 2 more
#VU8967 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Low
No
No
- 27.10.2017 SB2017102708
#VU8966 - NULL Pointer Dereference
CWE-476 Low
No
No
- 27.10.2017 SB2017102708
#VU8965 - Out-of-bounds read
CVE-2017-11145
CWE-125 Low
No
No
- 27.10.2017 SB2017102708
SB2017121805
SB2018011105
and 2 more
#VU110405 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-2369
CWE-22 Medium
Available
No
4.3.0 11.10.2017 SB2017101144
#VU110425 - Improper input validation
CVE-2007-1710
CWE-20 Low
No
No
4.4.5, 5.2.2 11.10.2017 SB2017101145
#VU9867 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2015-8866
CWE-611 Medium
No
No
- 22.05.2016 SB2018010412
SB2018011109


Showing elements 421 - 440 out of 689