Known vulnerabilities in PHP - page 4

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110307 - Integer overflow
CVE-2010-1866
CWE-190 High
Available
No
5.3.3 08.02.2024 SB2023011945
SB2011101004
#VU110275 - Memory corruption
CVE-2015-8389
CWE-119 High
No
No
5.5.32 16.02.2023 SB2023021689
SB2015121409
#VU72167 - Out-of-bounds write
CVE-2023-0568
CWE-787 Medium
No
No
8.0.28, 8.1.16, 8.2.3 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72166 - Use of Insufficiently Random Values
CVE-2023-0567
CWE-330 Medium
No
No
8.0.28, 8.1.16, 8.2.3 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 23 more
#VU72165 - Improper input validation
CVE-2023-0662
CWE-20 Medium
No
No
8.0.28, 8.1.16, 8.2.3 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more
#VU110277 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2013-1824
CWE-611 Medium
No
No
5.4.12 13.02.2023 SB2023021350
SB2014082910
#VU110282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-3870
CWE-79 Medium
Available
No
5.3.4 13.02.2023 SB2023021351
SB2011101004
#VU110274 - NULL Pointer Dereference
CVE-2014-0236
CWE-476 Medium
No
No
5.6.0 13.02.2023 SB2023021349
#VU110288 - Exposure of sensitive information to an unauthorized actor
CVE-2010-2531
CWE-200 Medium
No
No
5.3.3 19.01.2023 SB2023011945
SB2011101004
#VU110326 - Improper input validation
CVE-2009-2687
CWE-20 Medium
No
No
5.2.10 19.01.2023 SB2023011946
#VU110397 - Improper input validation
CVE-2006-7204
CWE-20 Low
No
No
4.4.4 19.01.2023 SB2023011947
#VU70788 - Integer overflow
CVE-2022-31631
CWE-190 Medium
No
No
8.0.27, 8.1.14, 8.2.1 07.01.2023 SB2023010702
SB2023010704
SB2023011201
and 21 more
#VU68887 - Integer overflow
CVE-2022-37454
CWE-190 High
Available
No
8.0.25, 8.1.12 01.11.2022 SB2022110118
SB2022110119
SB2022110209
and 69 more
#VU68886 - Out-of-bounds read
CVE-2022-31630
CWE-125 Medium
No
No
8.0.25, 8.1.12 01.11.2022 SB2022110119
SB2022110336
SB2022110814
and 21 more
#VU67756 - Security Features
CVE-2022-31629
CWE-254 Low
Available
No
7.4.32, 8.1.11 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 49 more
#VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-31628
CWE-835 Medium
No
No
7.4.32, 8.1.11 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 26 more
#VU110286 - Use of Externally-Controlled Format String
CVE-2010-2950
CWE-134 Medium
No
No
5.3.4 04.05.2011 SB2023021351
SB2011101004
#VU110289 - Heap-based Buffer Overflow
CVE-2010-3062
CWE-122 Medium
No
No
5.3.3 07.12.2010 SB2023011945
SB2011101004
#VU110290 - Heap-based Buffer Overflow
CVE-2010-3063
CWE-122 Medium
No
No
5.3.3 07.12.2010 SB2023011945
SB2011101004
#VU110291 - Stack-based buffer overflow
CVE-2010-3064
CWE-121 Medium
No
No
5.3.3 07.12.2010 SB2023011945
SB2011101004


Showing elements 61 - 80 out of 689