Known vulnerabilities in PHP - page 4

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110318 - Allocation of Resources Without Limits or Throttling
CVE-2009-4017
CWE-770 Medium
Available
No
5.3.0 15.02.2024 SB2024021554
SB2010012501
#VU110548 - Argument Injection or Modification
CVE-2001-1246
CWE-88 Medium
Available
No
4.1.1 14.02.2024 SB2024021454
#VU110307 - Integer overflow
CVE-2010-1866
CWE-190 High
Available
No
5.3.3 08.02.2024 SB2023011945
SB2011101004
#VU78978 - Memory corruption
CVE-2023-3824
CWE-119 Critical
Available
Exploited
8.0.30, 8.1.22 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823
CWE-611 High
No
No
8.0.30, 8.1.22 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247
CWE-330 Medium
No
No
8.0.29, 8.1.20, 8.2.7 09.06.2023 SB2023060919
SB2023061105
SB2023061516
and 24 more
#VU74185 - Memory corruption
CVE-2022-4900
CWE-119 Low
No
No
8.0.22, 8.1.9 30.03.2023 SB2023033010
SB2023033014
SB2023041468
and 4 more
#VU110275 - Memory corruption
CVE-2015-8389
CWE-119 High
No
No
5.5.32 16.02.2023 SB2023021689
SB2015121409
#VU72167 - Out-of-bounds write
CVE-2023-0568
CWE-787 Medium
No
No
8.0.28, 8.1.16, 8.2.3 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72166 - Use of Insufficiently Random Values
CVE-2023-0567
CWE-330 Medium
No
No
8.0.28, 8.1.16, 8.2.3 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 23 more
#VU72165 - Improper input validation
CVE-2023-0662
CWE-20 Medium
No
No
8.0.28, 8.1.16, 8.2.3 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more
#VU110277 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2013-1824
CWE-611 Medium
No
No
5.4.12 13.02.2023 SB2023021350
SB2014082910
#VU110282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-3870
CWE-79 Medium
Available
No
5.3.4 13.02.2023 SB2023021351
SB2011101004
#VU110274 - NULL Pointer Dereference
CVE-2014-0236
CWE-476 Medium
No
No
5.6.0 13.02.2023 SB2023021349
#VU110288 - Exposure of sensitive information to an unauthorized actor
CVE-2010-2531
CWE-200 Medium
No
No
5.3.3 19.01.2023 SB2023011945
SB2011101004
#VU110326 - Improper input validation
CVE-2009-2687
CWE-20 Medium
No
No
5.2.10 19.01.2023 SB2023011946
#VU110286 - Use of Externally-Controlled Format String
CVE-2010-2950
CWE-134 Medium
No
No
5.3.4 04.05.2011 SB2023021351
SB2011101004
#VU110289 - Heap-based Buffer Overflow
CVE-2010-3062
CWE-122 Medium
No
No
5.3.3 07.12.2010 SB2023011945
SB2011101004
#VU110290 - Heap-based Buffer Overflow
CVE-2010-3063
CWE-122 Medium
No
No
5.3.3 07.12.2010 SB2023011945
SB2011101004
#VU110291 - Stack-based buffer overflow
CVE-2010-3064
CWE-121 Medium
No
No
5.3.3 07.12.2010 SB2023011945
SB2011101004


Showing elements 61 - 80 out of 695