Known vulnerabilities in PHP - page 33

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU44549 - Improper Control of Generation of Code ('Code Injection')
CVE-2011-3379
CWE-94 Medium
No
No
- 03.11.2011 SB2011110303
SB2012092403
#VU44779 - Resource Management Errors
CVE-2011-3267
CWE-399 Medium
No
No
- 25.08.2011 SB2011021901
SB2011101004
#VU44780 - Memory corruption
CVE-2011-3268
CWE-119 High
No
No
- 25.08.2011 SB2011021901
SB2011101004
#VU44781 - Cryptographic Issues
CVE-2011-3189
CWE-310 Medium
No
No
- 25.08.2011 SB2011082501
SB2011101004
#VU44783 - Improper input validation
CVE-2011-3182
CWE-20 Medium
Available
No
- 25.08.2011 SB2011021901
SB2011101004
#VU44784 - Resource Management Errors
CVE-2011-1657
CWE-399 Medium
No
No
- 25.08.2011 SB2011053102
SB2011101004
#VU44946 - Permissions, Privileges, and Access Controls
CVE-2011-2202
CWE-264 Medium
Available
No
- 17.06.2011 SB2011021901
SB2011101004
SB2011082504
#VU45008 - Stack-based buffer overflow
CVE-2011-1938
CWE-121 Medium
Available
No
- 31.05.2011 SB2011053102
SB2011101004
SB2011082504
#VU45157 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-0441
CWE-59 High
No
No
- 29.03.2011 SB2011021901
#VU45220 - Resource Management Errors
CVE-2011-1148
CWE-399 Medium
No
No
- 18.03.2011 SB2011021901
SB2011101004
SB2011082504
#VU45307 - Improper input validation
CVE-2011-0420
CWE-20 Medium
Available
No
- 19.02.2011 SB2011021901
SB2011101004
#VU45388 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2011-0753
CWE-362 Medium
No
No
- 03.02.2011 SB2011011802
SB2011101004
#VU45389 - Improper input validation
CVE-2011-0755
CWE-20 Medium
No
No
- 03.02.2011 SB2011011802
SB2011101004
#VU45390 - Improper input validation
CVE-2011-0752
CWE-20 Medium
No
No
- 03.02.2011 SB2011020304
SB2011101004
#VU110298 - Use of Externally-Controlled Format String
CVE-2010-2094
CWE-134 Medium
Available
No
5.3.2 26.01.2011 SB2011012601
SB2011101004
#VU45430 - Resource Management Errors
CVE-2010-4697
CWE-399 Medium
No
No
- 18.01.2011 SB2011011803
SB2011101004
#VU45431 - Stack-based buffer overflow
CVE-2010-4698
CWE-121 Medium
No
No
- 18.01.2011 SB2011011803
SB2011101004
#VU45432 - Improper input validation
CVE-2010-4699
CWE-20 Medium
No
No
- 18.01.2011 SB2011011802
SB2011101004
#VU45433 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2010-4700
CWE-89 Medium
No
No
- 18.01.2011 SB2011011803
SB2011101004
#VU110312 - Improper input validation
CVE-2010-0397
CWE-20 Medium
Available
No
5.3.2 10.12.2010 SB2011012601


Showing elements 641 - 660 out of 695