Known vulnerabilities in PHP - page 3

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97748 - Improper input validation
CVE-2024-8925
CWE-20 Medium
No
No
8.1.30, 8.2.24, 8.3.12 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 16 more
#VU97747 - Insufficient Logging
CVE-2024-9026
CWE-778 Low
No
No
8.1.30, 8.2.24, 8.3.12 27.09.2024 SB2024092724
SB2024100148
SB2024101209
and 13 more
#VU97746 - Security Features
CVE-2024-8927
CWE-254 Medium
No
No
8.1.30, 8.2.24, 8.3.12 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 18 more
#VU110400 - Improper input validation
CVE-2007-2728
CWE-20 Medium
No
No
- 16.08.2024 SB2024081666
#VU91109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-5585
CWE-78 Medium
No
No
8.1.29, 8.2.20, 8.3.8 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 8 more
#VU91108 - Observable discrepancy
CVE-2024-2408
CWE-203 Medium
No
No
- 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 4 more
#VU91107 - Improper input validation
CVE-2024-5458
CWE-20 Medium
No
No
8.1.29, 8.2.20, 8.3.8 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 18 more
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577
CWE-78 Critical
Available
Exploited
8.1.29, 8.2.20, 8.3.8 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU110278 - Cryptographic Issues
CVE-2011-2483
CWE-310 Medium
No
No
5.3.7 23.04.2024 SB2024042360
SB2011101004
SB2011102510
and 1 more
#VU88485 - Resource exhaustion
CVE-2024-2757
CWE-400 Medium
No
No
8.3.6 11.04.2024 SB2024041173
SB2024041175
SB2024071831
and 2 more
#VU88484 - Improper Authentication
CVE-2024-3096
CWE-287 High
No
No
8.2.18, 8.3.6 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 25 more
#VU88483 - Security Features
CVE-2024-2756
CWE-254 Low
No
No
8.2.18, 8.3.6 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 24 more
#VU88482 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-1874
CWE-78 Medium
Available
No
8.2.18, 8.3.6 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 7 more
#VU110522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2004-0594
CWE-367 Medium
Available
No
5.0.1 15.02.2024 SB2024021555
#VU110318 - Allocation of Resources Without Limits or Throttling
CVE-2009-4017
CWE-770 Medium
Available
No
5.3.0 15.02.2024 SB2024021554
SB2010012501
#VU110548 - Argument Injection or Modification
CVE-2001-1246
CWE-88 Medium
Available
No
4.1.1 14.02.2024 SB2024021454
#VU78978 - Memory corruption
CVE-2023-3824
CWE-119 Critical
Available
Exploited
8.0.30, 8.1.22 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823
CWE-611 High
No
No
8.0.30, 8.1.22 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247
CWE-330 Medium
No
No
8.0.29, 8.1.20, 8.2.7 09.06.2023 SB2023060919
SB2023061105
SB2023061516
and 24 more
#VU74185 - Memory corruption
CVE-2022-4900
CWE-119 Low
No
No
8.0.22, 8.1.9 30.03.2023 SB2023033010
SB2023033014
SB2023041468
and 4 more


Showing elements 41 - 60 out of 689