Known vulnerabilities in PHP - page 29

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110272 - Improper input validation
CVE-2015-8873
CWE-20 Medium
No
No
5.4.44 05.11.2022 SB2016051609
#VU110266 - Heap-based Buffer Overflow
CVE-2016-4346
CWE-122 High
No
No
7.0.4 20.07.2022 SB2016052205
#VU110267 - Heap-based Buffer Overflow
CVE-2016-4345
CWE-122 High
No
No
7.0.4 20.07.2022 SB2016052205
#VU16140 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-8835
CWE-94 Medium
No
No
5.4.44, 5.5.28, 5.6.12 28.11.2018 SB2016051609
#VU16139 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-9767
CWE-22 Low
No
No
5.4.45, 5.5.29, 5.6.13 28.11.2018 SB2016052201
#VU110331 - Exposure of sensitive information to an unauthorized actor
CVE-2008-5498
CWE-200 Medium
Available
No
5.2.8 30.10.2018 SB2016062404
#VU110334 - Permissions, Privileges, and Access Controls
CVE-2008-5624
CWE-264 Medium
No
No
5.2.8 11.10.2018 SB2016062404
#VU110271 - Resource Management Errors
CVE-2015-8877
CWE-399 Medium
No
No
5.6.12 05.01.2018 SB2016052202
SB2016052704
SB2016053109
and 1 more
#VU3611 - Use After Free
CVE-2016-5771
CWE-416 High
Available
No
- 20.09.2016 SB2016061504
SB2018032605
#VU3613 - Use After Free
CVE-2016-5773
CWE-416 High
Available
No
- 20.09.2016 SB2016061503
SB2018032605
SB2016062312
and 2 more
#VU202 - Memory corruption
CWE-119 High
No
No
- 22.07.2016 SB2016072202
#VU110254 - Heap-based Buffer Overflow
CVE-2016-4344
CWE-122 High
No
No
7.0.4 22.05.2016 SB2016052205
#VU40278 - Improper input validation
CVE-2016-4343
CWE-20 High
No
No
- 22.05.2016 SB2016051611
#VU31455 - Memory corruption
CVE-2015-8878
CWE-119 Medium
No
No
5.6.12 22.05.2016 SB2016052202
#VU31456 - Improper input validation
CVE-2015-8876
CWE-20 Medium
No
No
5.6.12 22.05.2016 SB2016052202
#VU31457 - Cryptographic Issues
CVE-2015-8867
CWE-310 Medium
No
No
5.6.12 22.05.2016 SB2016052202
#VU40282 - Improper input validation
CVE-2016-3185
CWE-20 Low
No
No
- 16.05.2016 SB2016051612
#VU40283 - Stack-based buffer overflow
CVE-2016-2554
CWE-121 High
No
No
- 16.05.2016 SB2016051611
SB2016041327
#VU40284 - Improper Access Control
CVE-2015-8838
CWE-284 Medium
No
No
- 16.05.2016 SB2016051613
#VU110329 - Configuration
CVE-2008-5844
CWE-16 Medium
No
No
5.2.8 14.05.2009 SB2016062404


Showing elements 561 - 580 out of 695