Known vulnerabilities in PHP - page 29

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110272 - Improper input validation
CVE-2015-8873
CWE-20 Medium
No
No
5.4.44 05.11.2022 SB2016051609
#VU110266 - Heap-based Buffer Overflow
CVE-2016-4346
CWE-122 High
No
No
7.0.4 20.07.2022 SB2016052205
#VU110267 - Heap-based Buffer Overflow
CVE-2016-4345
CWE-122 High
No
No
7.0.4 20.07.2022 SB2016052205
#VU110341 - Memory corruption
CVE-2008-2829
CWE-119 Medium
No
No
5.2.7 10.10.2019 SB2016031110
#VU16140 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-8835
CWE-94 Medium
No
No
5.4.44, 5.5.28, 5.6.12 28.11.2018 SB2016051609
#VU16139 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-9767
CWE-22 Low
No
No
5.4.45, 5.5.29, 5.6.13 28.11.2018 SB2016052201
#VU110273 - Improper input validation
CVE-2015-4116
CWE-20 High
No
No
5.6.11 30.10.2018 SB2016051610
#VU110332 - Heap-based Buffer Overflow
CVE-2008-5557
CWE-122 High
No
No
5.2.7 11.10.2018 SB2016031110
#VU110342 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2008-2665
CWE-22 Medium
No
No
5.2.7 11.10.2018 SB2016031110
#VU110271 - Resource Management Errors
CVE-2015-8877
CWE-399 Medium
No
No
5.6.12 05.01.2018 SB2016052202
SB2016052704
SB2016053109
and 1 more
#VU40278 - Improper input validation
CVE-2016-4343
CWE-20 High
No
No
- 22.05.2016 SB2016051611
#VU31455 - Memory corruption
CVE-2015-8878
CWE-119 Medium
No
No
5.6.12 22.05.2016 SB2016052202
#VU31456 - Improper input validation
CVE-2015-8876
CWE-20 Medium
No
No
5.6.12 22.05.2016 SB2016052202
#VU31457 - Cryptographic Issues
CVE-2015-8867
CWE-310 Medium
No
No
5.6.12 22.05.2016 SB2016052202
#VU40282 - Improper input validation
CVE-2016-3185
CWE-20 Low
No
No
- 16.05.2016 SB2016051612
#VU40283 - Stack-based buffer overflow
CVE-2016-2554
CWE-121 High
No
No
- 16.05.2016 SB2016051611
SB2016041327
#VU40284 - Improper Access Control
CVE-2015-8838
CWE-284 Medium
No
No
- 16.05.2016 SB2016051613
#VU32405 - Improper input validation
CVE-2015-5589
CWE-20 High
No
No
5.4.43, 5.5.27, 5.6.11 16.05.2016 SB2016051610
SB2015072806
SB2015081704
and 3 more
#VU40511 - Improper input validation
CVE-2016-1904
CWE-20 Medium
No
No
- 19.01.2016 SB2016011915
#VU40512 - Memory corruption
CVE-2016-1903
CWE-119 High
No
No
- 19.01.2016 SB2016011915
SB2016011802
SB2016020405


Showing elements 561 - 580 out of 689