Known vulnerabilities in PHP - page 25

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110486 - Resource Management Errors
CVE-2006-1549
CWE-399 Low
Available
No
4.4.3, 5.1.3 18.10.2018 SB2017072045
#VU110489 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2006-0996
CWE-79 Medium
Available
No
4.4.3, 5.1.3 11.10.2017 SB2017072045
SB2006050801
#VU7359 - Heap-based Buffer Overflow
CWE-122 High
No
No
- 06.07.2017 SB2017070604
#VU7358 - Improper Access Control
CWE-284 Low
No
No
- 06.07.2017 SB2017070604
#VU7357 - Double Free
CWE-415 High
No
No
- 06.07.2017 SB2017070604
#VU7356 - Stack-based buffer overflow
CVE-2017-11628
CWE-121 High
No
No
- 06.07.2017 SB2017070604
SB2017092402
SB2017121805
and 3 more
#VU7355 - Out-of-bounds read
CVE-2017-7890
CWE-125 Low
No
No
- 06.07.2017 SB2017070604
#VU7353 - Out-of-bounds read
CVE-2017-11145
CWE-125 Low
No
No
- 06.07.2017 SB2017070604
#VU7352 - Stack-based buffer overflow
CVE-2017-11362
CWE-121 High
No
No
- 06.07.2017 SB2017070604
SB2017092402
SB2018050311
#VU7351 - Out-of-bounds read
CVE-2017-12933
CWE-125 Low
No
No
- 06.07.2017 SB2017070604
#VU7350 - Use After Free
CVE-2017-12934
CWE-416 Low
No
No
- 06.07.2017 SB2017070604
#VU7349 - NULL Pointer Dereference
CVE-2017-9229
CWE-476 Low
No
No
- 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7348 - Out-of-bounds write
CVE-2017-9228
CWE-787 High
No
No
- 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 17 more
#VU7347 - Out-of-bounds read
CVE-2017-9227
CWE-125 Low
No
No
- 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7346 - Out-of-bounds write
CVE-2017-9226
CWE-787 High
No
No
- 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 14 more
#VU7345 - Out-of-bounds read
CVE-2017-9224
CWE-125 Low
No
No
- 06.07.2017 SB2017070604
SB2017071001
SB2017081719
and 15 more
#VU7273 - Server-Side Request Forgery (SSRF)
CVE-2017-7272
CWE-918 High
No
No
- 30.06.2017 SB2017040301
SB2017063014
#VU110255 - Use After Free
CVE-2016-4473
CWE-416 High
No
No
5.6.23, 7.0.8 16.06.2017 SB2017061639
#VU6975 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 08.06.2017 SB2017060802
#VU38971 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-9067
CWE-22 Low
No
No
- 18.05.2017 SB2017051820


Showing elements 481 - 500 out of 695