Known vulnerabilities in PHP - page 31

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU4197 - Heap-based Buffer Overflow
CVE-2012-2688
CWE-122 Critical
No
No
- 11.01.2017 SB2012071901
SB2012072301
SB2012080501
and 4 more
#VU41567 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-3981
CWE-59 Medium
No
No
- 08.06.2014 SB2014060801
SB2014082105
SB2014070906
and 4 more
#VU32548 - Permissions, Privileges, and Access Controls
CVE-2013-7345
CWE-264 Medium
No
No
- 24.03.2014 SB2014032402
SB2014041813
SB2014072304
and 8 more
#VU33295 - NULL Pointer Dereference
CVE-2014-2497
CWE-476 Medium
No
No
5.4.27 21.03.2014 SB2014032102
SB2014090109
SB2014070709
and 8 more
#VU42031 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1171
CWE-200 Medium
No
No
- 15.02.2014 SB2014021503
#VU42670 - Permissions, Privileges, and Access Controls
CVE-2011-4718
CWE-264 Medium
No
No
- 13.08.2013 SB2013081301
SB2014082910
#VU32631 - Memory corruption
CVE-2013-4113
CWE-119 Medium
No
No
5.3.27 13.07.2013 SB2013071301
SB2013071603
SB2013080902
and 8 more
#VU42772 - Improper input validation
CVE-2013-4635
CWE-20 Medium
No
No
- 22.06.2013 SB2013062102
SB2013080902
SB2013080903
and 4 more
#VU42773 - Improper input validation
CVE-2013-4636
CWE-20 Medium
No
No
- 22.06.2013 SB2013062102
SB2014082910
#VU42774 - Heap-based Buffer Overflow
CVE-2013-2110
CWE-122 Medium
No
No
- 21.06.2013 SB2013062102
SB2013062401
SB2013062402
and 2 more
#VU32704 - Permissions, Privileges, and Access Controls
CVE-2013-1635
CWE-264 Medium
No
No
5.3.22 06.03.2013 SB2013030601
SB2013041103
SB2013080902
and 5 more
#VU32705 - Exposure of sensitive information to an unauthorized actor
CVE-2013-1643
CWE-200 Medium
No
No
5.3.23 06.03.2013 SB2013030602
SB2013041104
SB2013080902
and 5 more
#VU43164 - Exposure of sensitive information to an unauthorized actor
CVE-2012-6113
CWE-200 Medium
No
No
- 19.01.2013 SB2013011901
#VU43610 - Improper input validation
CVE-2012-4388
CWE-20 Medium
No
No
- 08.09.2012 SB2012090801
SB2013080905
#VU43654 - Improper input validation
CVE-2011-1398
CWE-20 Medium
Available
No
- 31.08.2012 SB2012052401
SB2013080905
SB2012092403
#VU43771 - Improper input validation
CVE-2012-3450
CWE-20 Low
Available
No
- 06.08.2012 SB2012080605
SB2012082402
SB2012092403
#VU32779 - Permissions, Privileges, and Access Controls
CVE-2012-3365
CWE-264 Medium
No
No
5.3.15 20.07.2012 SB2012072001
SB2012072522
SB2012082401
and 2 more
#VU43908 - Heap-based Buffer Overflow
CVE-2012-2386
CWE-122 Medium
Available
No
- 07.07.2012 SB2012051102
SB2012070502
SB2012070509
and 1 more
#VU44053 - Improper input validation
CVE-2012-1172
CWE-20 Medium
No
No
- 24.05.2012 SB2012052401
SB2012050904
SB2012050905
and 3 more
#VU44085 - Memory corruption
CVE-2012-2329
CWE-119 Medium
Available
No
- 11.05.2012 SB2012051102


Showing elements 601 - 620 out of 689