Known vulnerabilities in PHP - page 30

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU19888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9310
CWE-79 Low
No
No
- 02.08.2019 SB2014122202
#VU19874 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-3313
CWE-89 High
Available
No
- 02.08.2019 SB2015041404
#VU19873 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-3314
CWE-89 High
Available
No
- 02.08.2019 SB2015041403
#VU19828 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-5714
CWE-79 Low
No
No
- 02.08.2019 SB2015091502
#VU10948 - Improper input validation
CVE-2016-10712
CWE-20 Low
No
No
- 13.03.2018 SB2016011001
SB2018022401
SB2018022313
and 2 more
#VU40285 - Improper input validation
CVE-2015-6834
CWE-20 High
Available
No
- 16.05.2016 SB2016011913
#VU40513 - Use of Externally-Controlled Format String
CVE-2015-8617
CWE-134 High
Available
No
- 19.01.2016 SB2016011915
#VU40514 - Improper input validation
CVE-2015-8616
CWE-20 High
No
No
- 19.01.2016 SB2016011916
#VU40515 - Improper input validation
CVE-2015-6836
CWE-20 Medium
No
No
- 19.01.2016 SB2016011913
#VU40516 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-6833
CWE-22 Medium
No
No
- 19.01.2016 SB2016011917
SB2015081704
SB2015081705
and 1 more
#VU40517 - Use After Free
CVE-2015-6832
CWE-416 Medium
No
No
- 19.01.2016 SB2016011917
SB2015081704
SB2015081705
and 1 more
#VU40518 - Improper input validation
CVE-2015-6831
CWE-20 Medium
No
No
- 19.01.2016 SB2016011917
SB2015081704
SB2015081705
and 1 more
#VU40519 - Improper input validation
CVE-2015-6527
CWE-20 Medium
No
No
- 19.01.2016 SB2016011916
#VU32406 - Stack-based buffer overflow
CVE-2015-5590
CWE-121 Medium
No
No
5.4.43, 5.5.27, 5.6.11 19.01.2016 SB2016011911
SB2015072807
SB2015081704
and 3 more
#VU31834 - Out-of-bounds read
CVE-2014-9709
CWE-125 Medium
No
No
5.6.5 30.03.2015 SB2015033001
SB2015051316
SB2015041703
and 3 more
#VU40984 - Improper input validation
CVE-2014-9425
CWE-20 Medium
No
No
- 31.12.2014 SB2014123102
SB2015030801
#VU41088 - Memory corruption
CVE-2014-8626
CWE-119 Medium
No
No
- 23.11.2014 SB2014112303
#VU10333 - UNIX Symbolic Link (Symlink) Following
CVE-2014-5459
CWE-61 Low
No
No
- 27.09.2014 SB2014082701
#VU32501 - Improper input validation
CVE-2014-5120
CWE-20 Medium
No
No
5.4.32 23.08.2014 SB2014082301
SB2014090112
SB2014091920
and 2 more
#VU32500 - Improper input validation
CVE-2014-3538
CWE-20 Medium
No
No
- 03.07.2014 SB2014070302
SB2014072101
SB2014072102
and 2 more


Showing elements 581 - 600 out of 689