Known vulnerabilities in PHP - page 26

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16138 - Deserialization of Untrusted Data
CVE-2016-7124
CWE-502 Medium
Available
No
5.6.25, 7.0.10 28.11.2018 SB2016091203
SB2016100539
#VU16137 - Heap-based Buffer Overflow
CVE-2016-7134
CWE-122 Medium
No
No
7.0.10 27.11.2018 SB2016091202
SB2016090902
#VU10334 - Deserialization of Untrusted Data
CVE-2016-9138
CWE-502 Low
No
No
- 04.01.2017 SB2016092303
SB2016121353
#VU1001 - Use After Free
CVE-2015-6835
CWE-416 High
Available
No
- 14.10.2016 SB2016092303
#VU528 - Improper Access Control
CVE-2016-7418
CWE-284 High
No
No
- 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU527 - Improper Access Control
CVE-2016-7413
CWE-284 High
No
No
- 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU526 - Improper Access Control
CVE-2016-7417
CWE-284 High
No
No
- 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU525 - Improper Access Control
CVE-2016-7414
CWE-284 High
No
No
- 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU524 - Improper Access Control
CVE-2016-7412
CWE-284 High
No
No
- 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU523 - Improper Access Control
CVE-2016-7416
CWE-284 High
No
No
- 19.09.2016 SB2016091801
SB2016092401
SB2016101401
and 9 more
#VU40095 - Integer overflow
CVE-2016-7133
CWE-190 High
No
No
- 12.09.2016 SB2016091215
SB2016090902
#VU40096 - NULL Pointer Dereference
CVE-2016-7132
CWE-476 Medium
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40097 - NULL Pointer Dereference
CVE-2016-7131
CWE-476 Medium
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40098 - NULL Pointer Dereference
CVE-2016-7130
CWE-476 Medium
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40099 - Improper input validation
CVE-2016-7129
CWE-20 High
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40100 - Exposure of sensitive information to an unauthorized actor
CVE-2016-7128
CWE-200 Medium
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40101 - Out-of-bounds write
CVE-2016-7127
CWE-787 High
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40102 - Out-of-bounds write
CVE-2016-7126
CWE-787 High
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40103 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2016-7125
CWE-74 Medium
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU110287 - Exposure of sensitive information to an unauthorized actor
CVE-2010-2484
CWE-200 Medium
No
No
5.2.14 23.08.2016 SB2016082313
SB2011101004


Showing elements 501 - 520 out of 689