Known vulnerabilities in PHP - page 31

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU19888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9310
CWE-79 Low
No
No
- 02.08.2019 SB2014122202
#VU40984 - Improper input validation
CVE-2014-9425
CWE-20 Medium
No
No
- 31.12.2014 SB2014123102
SB2015030801
#VU41088 - Memory corruption
CVE-2014-8626
CWE-119 Medium
No
No
- 23.11.2014 SB2014112303
#VU10333 - UNIX Symbolic Link (Symlink) Following
CVE-2014-5459
CWE-61 Low
No
No
- 27.09.2014 SB2014082701
#VU32501 - Improper input validation
CVE-2014-5120
CWE-20 Medium
No
No
5.4.32 23.08.2014 SB2014082301
SB2014090112
SB2014091920
and 2 more
#VU32500 - Improper input validation
CVE-2014-3538
CWE-20 Medium
No
No
- 03.07.2014 SB2014070302
SB2014072101
SB2014072102
and 2 more
#VU41567 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-3981
CWE-59 Medium
No
No
- 08.06.2014 SB2014060801
SB2014082105
SB2014070906
and 4 more
#VU32548 - Permissions, Privileges, and Access Controls
CVE-2013-7345
CWE-264 Medium
No
No
- 24.03.2014 SB2014032402
SB2014041813
SB2014072304
and 8 more
#VU33295 - NULL Pointer Dereference
CVE-2014-2497
CWE-476 Medium
No
No
5.4.27 21.03.2014 SB2014032102
SB2014090109
SB2014070709
and 8 more
#VU42031 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1171
CWE-200 Medium
No
No
- 15.02.2014 SB2014021503
#VU42670 - Permissions, Privileges, and Access Controls
CVE-2011-4718
CWE-264 Medium
No
No
- 13.08.2013 SB2013081301
SB2014082910
#VU32631 - Memory corruption
CVE-2013-4113
CWE-119 Medium
No
No
5.3.27 13.07.2013 SB2013071301
SB2013071603
SB2013080902
and 8 more
#VU42772 - Improper input validation
CVE-2013-4635
CWE-20 Medium
No
No
- 22.06.2013 SB2013062102
SB2013080902
SB2013080903
and 4 more
#VU42773 - Improper input validation
CVE-2013-4636
CWE-20 Medium
No
No
- 22.06.2013 SB2013062102
SB2014082910
#VU42774 - Heap-based Buffer Overflow
CVE-2013-2110
CWE-122 Medium
No
No
- 21.06.2013 SB2013062102
SB2013062401
SB2013062402
and 2 more
#VU32704 - Permissions, Privileges, and Access Controls
CVE-2013-1635
CWE-264 Medium
No
No
5.3.22 06.03.2013 SB2013030601
SB2013041103
SB2013080902
and 5 more
#VU32705 - Exposure of sensitive information to an unauthorized actor
CVE-2013-1643
CWE-200 Medium
No
No
5.3.23 06.03.2013 SB2013030602
SB2013041104
SB2013080902
and 5 more
#VU43164 - Exposure of sensitive information to an unauthorized actor
CVE-2012-6113
CWE-200 Medium
No
No
- 19.01.2013 SB2013011901
#VU43610 - Improper input validation
CVE-2012-4388
CWE-20 Medium
No
No
- 08.09.2012 SB2012090801
SB2013080905
#VU43771 - Improper input validation
CVE-2012-3450
CWE-20 Low
Available
No
- 06.08.2012 SB2012080605
SB2012082402
SB2012092403


Showing elements 601 - 620 out of 695