Known vulnerabilities in PHP - page 27

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16138 - Deserialization of Untrusted Data
CVE-2016-7124
CWE-502 Medium
Available
No
5.6.25, 7.0.10 28.11.2018 SB2016091203
SB2016100539
#VU110311 - Permissions, Privileges, and Access Controls
CVE-2010-1130
CWE-264 Medium
Available
No
5.2.14, 5.3.2 30.10.2018 SB2016082313
SB2011101004
#VU110293 - Exposure of sensitive information to an unauthorized actor
CVE-2010-2190
CWE-200 Medium
No
No
5.2.14, 5.3.3 17.08.2017 SB2016082313
SB2011101004
#VU110294 - Memory corruption
CVE-2010-2191
CWE-119 Medium
No
No
5.2.14, 5.3.3 17.08.2017 SB2016082313
SB2011101004
#VU110302 - Resource Management Errors
CVE-2010-1917
CWE-399 Medium
No
No
5.2.14, 5.3.3 17.08.2017 SB2016082313
SB2011101004
SB2010082803
#VU40099 - Improper input validation
CVE-2016-7129
CWE-20 High
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40100 - Exposure of sensitive information to an unauthorized actor
CVE-2016-7128
CWE-200 Medium
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40101 - Out-of-bounds write
CVE-2016-7127
CWE-787 High
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40102 - Out-of-bounds write
CVE-2016-7126
CWE-787 High
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU40103 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2016-7125
CWE-74 Medium
No
No
- 12.09.2016 SB2016091215
SB2016100539
SB2016090902
#VU110287 - Exposure of sensitive information to an unauthorized actor
CVE-2010-2484
CWE-200 Medium
No
No
5.2.14 23.08.2016 SB2016082313
SB2011101004
#VU110295 - Exposure of sensitive information to an unauthorized actor
CVE-2010-2100
CWE-200 Medium
No
No
5.2.14, 5.3.3 23.08.2016 SB2016082313
SB2011101004
#VU110296 - Exposure of sensitive information to an unauthorized actor
CVE-2010-2101
CWE-200 Medium
No
No
5.2.14, 5.3.3 23.08.2016 SB2016082313
SB2011101004
#VU110299 - Exposure of sensitive information to an unauthorized actor
CVE-2010-2097
CWE-200 Medium
No
No
5.2.14, 5.3.3 23.08.2016 SB2016082313
SB2011101004
#VU110303 - Exposure of sensitive information to an unauthorized actor
CVE-2010-1860
CWE-200 Medium
No
No
5.2.14, 5.3.3 23.08.2016 SB2016082313
SB2011101004
#VU110305 - Exposure of sensitive information to an unauthorized actor
CVE-2010-1862
CWE-200 Medium
No
No
5.2.14, 5.3.3 23.08.2016 SB2016082313
SB2011101004
#VU110306 - Exposure of sensitive information to an unauthorized actor
CVE-2010-1864
CWE-200 Medium
No
No
5.2.14, 5.3.3 23.08.2016 SB2016082313
SB2011101004
#VU110292 - Permissions, Privileges, and Access Controls
CVE-2010-3065
CWE-264 Medium
No
No
5.2.14, 5.3.3 10.12.2010 SB2016082313
SB2011101004
#VU110308 - Improper Control of Generation of Code ('Code Injection')
CVE-2010-1868
CWE-94 Medium
No
No
5.2.14, 5.3.3 11.05.2010 SB2016082313
SB2011101004
#VU110304 - Resource Management Errors
CVE-2010-1861
CWE-399 Medium
No
No
5.2.14, 5.3.3 10.05.2010 SB2016082313
SB2011101004


Showing elements 521 - 540 out of 695