Known vulnerabilities in PHP - page 33

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU44783 - Improper input validation
CVE-2011-3182
CWE-20 Medium
Available
No
- 25.08.2011 SB2011021901
SB2011101004
#VU44946 - Permissions, Privileges, and Access Controls
CVE-2011-2202
CWE-264 Medium
Available
No
- 17.06.2011 SB2011021901
SB2011101004
SB2011082504
#VU45157 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-0441
CWE-59 High
No
No
- 29.03.2011 SB2011021901
#VU45183 - Memory corruption
CVE-2011-1464
CWE-119 Medium
No
No
- 20.03.2011 SB2011011103
SB2011101004
#VU45185 - Improper input validation
CVE-2011-1466
CWE-20 Medium
No
No
- 20.03.2011 SB2011011103
SB2011101004
#VU45186 - Improper input validation
CVE-2011-1467
CWE-20 Medium
Available
No
- 20.03.2011 SB2011011103
SB2011101004
#VU45187 - Resource Management Errors
CVE-2011-1468
CWE-399 Medium
Available
No
- 20.03.2011 SB2011011103
SB2011101004
#VU45188 - Improper input validation
CVE-2011-1469
CWE-20 Medium
No
No
- 20.03.2011 SB2011011103
SB2011101004
#VU45220 - Resource Management Errors
CVE-2011-1148
CWE-399 Medium
No
No
- 18.03.2011 SB2011021901
SB2011101004
SB2011082504
#VU45307 - Improper input validation
CVE-2011-0420
CWE-20 Medium
Available
No
- 19.02.2011 SB2011021901
SB2011101004
#VU45388 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2011-0753
CWE-362 Medium
No
No
- 03.02.2011 SB2011011802
SB2011101004
#VU45389 - Improper input validation
CVE-2011-0755
CWE-20 Medium
No
No
- 03.02.2011 SB2011011802
SB2011101004
#VU45390 - Improper input validation
CVE-2011-0752
CWE-20 Medium
No
No
- 03.02.2011 SB2011020304
SB2011101004
#VU110298 - Use of Externally-Controlled Format String
CVE-2010-2094
CWE-134 Medium
Available
No
5.3.2 26.01.2011 SB2011012601
SB2011101004
#VU45430 - Resource Management Errors
CVE-2010-4697
CWE-399 Medium
No
No
- 18.01.2011 SB2011011803
SB2011101004
#VU45431 - Stack-based buffer overflow
CVE-2010-4698
CWE-121 Medium
No
No
- 18.01.2011 SB2011011803
SB2011101004
#VU45432 - Improper input validation
CVE-2010-4699
CWE-20 Medium
No
No
- 18.01.2011 SB2011011802
SB2011101004
#VU45433 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2010-4700
CWE-89 Medium
No
No
- 18.01.2011 SB2011011803
SB2011101004
#VU45434 - Improper input validation
CVE-2006-7243
CWE-20 Medium
No
No
- 18.01.2011 SB2011011802
SB2015061203
SB2014031903
and 3 more
#VU110312 - Improper input validation
CVE-2010-0397
CWE-20 Medium
Available
No
5.3.2 10.12.2010 SB2011012601


Showing elements 641 - 660 out of 689