Known vulnerabilities in PHP - page 30

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110341 - Memory corruption
CVE-2008-2829
CWE-119 Medium
No
No
5.2.7 10.10.2019 SB2016031110
#VU19874 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-3313
CWE-89 High
Available
No
- 02.08.2019 SB2015041404
#VU19873 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-3314
CWE-89 High
Available
No
- 02.08.2019 SB2015041403
#VU19828 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-5714
CWE-79 Low
No
No
- 02.08.2019 SB2015091502
#VU110273 - Improper input validation
CVE-2015-4116
CWE-20 High
No
No
5.6.11 30.10.2018 SB2016051610
#VU110332 - Heap-based Buffer Overflow
CVE-2008-5557
CWE-122 High
No
No
5.2.7 11.10.2018 SB2016031110
#VU110342 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2008-2665
CWE-22 Medium
No
No
5.2.7 11.10.2018 SB2016031110
#VU40285 - Improper input validation
CVE-2015-6834
CWE-20 High
Available
No
- 16.05.2016 SB2016011913
#VU32405 - Improper input validation
CVE-2015-5589
CWE-20 High
No
No
5.4.43, 5.5.27, 5.6.11 16.05.2016 SB2016051610
SB2015072806
SB2015081704
and 3 more
#VU40511 - Improper input validation
CVE-2016-1904
CWE-20 Medium
No
No
- 19.01.2016 SB2016011915
#VU40512 - Memory corruption
CVE-2016-1903
CWE-119 High
No
No
- 19.01.2016 SB2016011915
SB2016011802
SB2016020405
#VU40513 - Use of Externally-Controlled Format String
CVE-2015-8617
CWE-134 High
Available
No
- 19.01.2016 SB2016011915
#VU40514 - Improper input validation
CVE-2015-8616
CWE-20 High
No
No
- 19.01.2016 SB2016011916
#VU40515 - Improper input validation
CVE-2015-6836
CWE-20 Medium
No
No
- 19.01.2016 SB2016011913
#VU40516 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-6833
CWE-22 Medium
No
No
- 19.01.2016 SB2016011917
SB2015081704
SB2015081705
and 1 more
#VU40517 - Use After Free
CVE-2015-6832
CWE-416 Medium
No
No
- 19.01.2016 SB2016011917
SB2015081704
SB2015081705
and 1 more
#VU40518 - Improper input validation
CVE-2015-6831
CWE-20 Medium
No
No
- 19.01.2016 SB2016011917
SB2015081704
SB2015081705
and 1 more
#VU40519 - Improper input validation
CVE-2015-6527
CWE-20 Medium
No
No
- 19.01.2016 SB2016011916
#VU32406 - Stack-based buffer overflow
CVE-2015-5590
CWE-121 Medium
No
No
5.4.43, 5.5.27, 5.6.11 19.01.2016 SB2016011911
SB2015072807
SB2015081704
and 3 more
#VU31834 - Out-of-bounds read
CVE-2014-9709
CWE-125 Medium
No
No
5.6.5 30.03.2015 SB2015033001
SB2015051316
SB2015041703
and 3 more


Showing elements 581 - 600 out of 695