Known vulnerabilities in PHP - page 32

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5939 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-2311
CWE-78 Critical
Available
No
- 14.03.2017 SB2012050601
SB2015050401
SB2012050701
and 5 more
#VU4201 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-1823
CWE-78 Critical
Available
Exploited
8.3.8 11.01.2017 SB2012050301
SB2015050401
SB2012050901
and 11 more
#VU4156 - Memory corruption
CVE-2012-2376
CWE-119 Critical
Available
No
- 11.01.2017 SB2012051101
#VU44086 - Permissions, Privileges, and Access Controls
CVE-2012-2335
CWE-264 Medium
No
No
- 11.05.2012 SB2012051102
SB2012070502
SB2012060902
and 1 more
#VU44087 - Improper input validation
CVE-2012-2336
CWE-20 Medium
No
No
- 11.05.2012 SB2012051102
SB2012070502
SB2012060902
and 1 more
#VU44297 - Improper input validation
CVE-2012-0788
CWE-20 Medium
Available
No
- 14.02.2012 SB2012020206
SB2012092403
#VU44298 - Missing release of memory after effective lifetime
CVE-2012-0789
CWE-401 Medium
Available
No
- 14.02.2012 SB2012020206
SB2012092403
#VU44303 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-0831
CWE-89 Medium
No
No
- 10.02.2012 SB2012021001
SB2012092403
#VU33324 - Resource Management Errors
CVE-2012-0830
CWE-399 Medium
Available
No
5.3.10 06.02.2012 SB2012020602
SB2012020301
SB2012020209
and 3 more
#VU44347 - Permissions, Privileges, and Access Controls
CVE-2012-0057
CWE-264 Medium
No
No
- 02.02.2012 SB2012020206
SB2012092403
#VU44403 - NULL Pointer Dereference
CVE-2012-0781
CWE-476 Medium
Available
No
- 18.01.2012 SB2011110303
#VU44404 - NULL Pointer Dereference
CVE-2011-4153
CWE-476 Medium
Available
No
- 18.01.2012 SB2011110303
SB2012061401
#VU32831 - Improper input validation
CVE-2011-4885
CWE-20 Medium
Available
No
5.3.9 30.12.2011 SB2011123002
SB2012011004
SB2012020209
and 2 more
#VU33696 - Improper input validation
CVE-2011-4566
CWE-20 Medium
No
No
- 29.11.2011 SB2011112901
SB2012011706
SB2012011911
and 1 more
#VU44549 - Improper Control of Generation of Code ('Code Injection')
CVE-2011-3379
CWE-94 Medium
No
No
- 03.11.2011 SB2011110303
SB2012092403
#VU44779 - Resource Management Errors
CVE-2011-3267
CWE-399 Medium
No
No
- 25.08.2011 SB2011021901
SB2011101004
#VU44780 - Memory corruption
CVE-2011-3268
CWE-119 High
No
No
- 25.08.2011 SB2011021901
SB2011101004
#VU44781 - Cryptographic Issues
CVE-2011-3189
CWE-310 Medium
No
No
- 25.08.2011 SB2011082501
SB2011101004
#VU44784 - Resource Management Errors
CVE-2011-1657
CWE-399 Medium
No
No
- 25.08.2011 SB2011053102
SB2011101004
#VU45008 - Stack-based buffer overflow
CVE-2011-1938
CWE-121 Medium
Available
No
- 31.05.2011 SB2011053102
SB2011101004
SB2011082504


Showing elements 621 - 640 out of 689