Known vulnerabilities in PHP - page 25

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110551 - Improper input validation
CVE-2000-0967
CWE-20 High
Available
No
3.0.1, 4.0.1 03.05.2018 SB2016101857
#VU10338 - Resource exhaustion
CVE-2017-9119
CWE-400 Low
No
No
- 31.01.2018 SB2017051517
#VU7359 - Heap-based Buffer Overflow
CWE-122 High
No
No
- 06.07.2017 SB2017070604
#VU7358 - Improper Access Control
CWE-284 Low
No
No
- 06.07.2017 SB2017070604
#VU7357 - Double Free
CWE-415 High
No
No
- 06.07.2017 SB2017070604
#VU7356 - Stack-based buffer overflow
CVE-2017-11628
CWE-121 High
No
No
- 06.07.2017 SB2017070604
SB2017092402
SB2017121805
and 3 more
#VU7355 - Out-of-bounds read
CVE-2017-7890
CWE-125 Low
No
No
- 06.07.2017 SB2017070604
#VU7353 - Out-of-bounds read
CVE-2017-11145
CWE-125 Low
No
No
- 06.07.2017 SB2017070604
#VU7352 - Stack-based buffer overflow
CVE-2017-11362
CWE-121 High
No
No
- 06.07.2017 SB2017070604
SB2017092402
SB2018050311
#VU7351 - Out-of-bounds read
CVE-2017-12933
CWE-125 Low
No
No
- 06.07.2017 SB2017070604
#VU7350 - Use After Free
CVE-2017-12934
CWE-416 Low
No
No
- 06.07.2017 SB2017070604
#VU7273 - Server-Side Request Forgery (SSRF)
CVE-2017-7272
CWE-918 High
No
No
- 30.06.2017 SB2017040301
SB2017063014
#VU110255 - Use After Free
CVE-2016-4473
CWE-416 High
No
No
5.6.23, 7.0.8 16.06.2017 SB2017061639
#VU6975 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 08.06.2017 SB2017060802
#VU38971 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-9067
CWE-22 Low
No
No
- 18.05.2017 SB2017051820
#VU10335 - Improper input validation
CVE-2017-8923
CWE-20 Low
No
No
- 12.05.2017 SB2017051517
SB2022111831
SB2022111832
and 5 more
#VU39590 - Permissions, Privileges, and Access Controls
CVE-2015-8994
CWE-264 Medium
No
No
- 02.03.2017 SB2017030206
#VU110276 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2013-6501
CWE-74 Low
No
No
5.6.8 30.11.2016 SB2016113015
#VU110544 - Improper input validation
CVE-2002-0229
CWE-20 Medium
Available
No
3.0.17, 4.0.7, 4.10 18.10.2016 SB2016101856
#VU110546 - Improper input validation
CVE-2002-0081
CWE-20 Medium
No
No
3.0.1, 4.0.7, 4.1.2 18.10.2016 SB2016101857


Showing elements 481 - 500 out of 689