Known vulnerabilities in PHP - page 34

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110346 - Incorrect Calculation of Buffer Size
CVE-2008-0599
CWE-131 High
No
No
5.2.6 02.02.2024 SB2009081906
#VU110313 - Improper input validation
CVE-2009-4418
CWE-20 Medium
No
No
5.2.12 30.10.2018 SB2010121004
#VU110333 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2008-5658
CWE-22 Medium
No
No
5.2.6 11.10.2018 SB2009081906
#VU110335 - Permissions, Privileges, and Access Controls
CVE-2008-5625
CWE-264 Medium
Available
No
5.2.6 11.10.2018 SB2009081906
#VU110343 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2008-2666
CWE-22 Medium
Available
No
5.2.6 11.10.2018 SB2009081906
#VU110349 - Improper input validation
CVE-2008-1384
CWE-20 Medium
No
No
5.2.6 11.10.2018 SB2009081906
#VU110300 - Exposure of sensitive information to an unauthorized actor
CVE-2010-1914
CWE-200 Medium
No
No
5.2.13, 5.3.3 17.08.2017 SB2010120701
SB2011101004
#VU110301 - Exposure of sensitive information to an unauthorized actor
CVE-2010-1915
CWE-200 Medium
No
No
5.2.13, 5.3.3 17.08.2017 SB2010120701
SB2011101004
#VU45189 - Improper input validation
CVE-2011-1470
CWE-20 Medium
Available
No
- 20.03.2011 SB2011011103
SB2011101004
#VU45190 - Improper input validation
CVE-2011-1471
CWE-20 Medium
Available
No
- 20.03.2011 SB2011011103
SB2011101004
#VU45192 - Improper input validation
CVE-2011-0421
CWE-20 Medium
Available
No
- 20.03.2011 SB2011011103
SB2011073002
SB2011101004
#VU45193 - Out-of-bounds read
CVE-2011-0708
CWE-125 Medium
Available
No
- 20.03.2011 SB2011011103
SB2011101004
#VU45221 - Use of Externally-Controlled Format String
CVE-2011-1153
CWE-134 Medium
No
No
- 17.03.2011 SB2011011103
SB2011101004
#VU45227 - Improper input validation
CVE-2011-1092
CWE-20 Medium
Available
No
- 15.03.2011 SB2011011103
SB2011101004
#VU45475 - Improper input validation
CVE-2010-4645
CWE-20 Medium
Available
No
- 11.01.2011 SB2011011103
SB2011011114
SB2011101004
#VU110309 - Cryptographic Issues
CVE-2010-1128
CWE-310 Medium
Available
No
5.2.12 10.12.2010 SB2010121004
SB2011101004
#VU110297 - Use After Free
CVE-2010-2093
CWE-416 Medium
No
No
5.2.13, 5.3.2 07.12.2010 SB2010120701
SB2011101004
#VU110310 - Improper input validation
CVE-2010-1129
CWE-20 Medium
No
No
5.2.13 31.08.2010 SB2010120701
SB2011101004
#VU33703 - Use After Free
CVE-2010-2225
CWE-416 Medium
No
No
- 24.06.2010 SB2010062401
SB2010070602
SB2011101004
and 1 more
#VU110325 - Permissions, Privileges, and Access Controls
CVE-2008-7002
CWE-264 Low
Available
No
5.2.6 19.08.2009 SB2009081906


Showing elements 661 - 680 out of 689