Known vulnerabilities in PHP - page 5

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110397 - Improper input validation
CVE-2006-7204
CWE-20 Low
No
No
4.4.4 19.01.2023 SB2023011947
#VU70788 - Integer overflow
CVE-2022-31631
CWE-190 Medium
No
No
8.0.27, 8.1.14, 8.2.1 07.01.2023 SB2023010702
SB2023010704
SB2023011201
and 21 more
#VU68887 - Integer overflow
CVE-2022-37454
CWE-190 High
Available
No
8.0.25, 8.1.12 01.11.2022 SB2022110118
SB2022110119
SB2022110209
and 69 more
#VU68886 - Out-of-bounds read
CVE-2022-31630
CWE-125 Medium
No
No
8.0.25, 8.1.12 01.11.2022 SB2022110119
SB2022110336
SB2022110814
and 21 more
#VU67756 - Security Features
CVE-2022-31629
CWE-254 Low
Available
No
7.4.32, 8.1.11 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 49 more
#VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-31628
CWE-835 Medium
No
No
7.4.32, 8.1.11 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 26 more
#VU110270 - Improper input validation
CVE-2015-8879
CWE-20 Medium
No
No
5.5.38 29.08.2022 SB2022082949
#VU110555 - Improper input validation
CVE-1999-0238
CWE-20 High
Available
No
- 17.08.2022 SB2022081762
#VU110340 - Heap-based Buffer Overflow
CVE-2008-2371
CWE-122 Medium
No
No
- 01.08.2022 SB2022080177
SB2008070702
#VU110257 - Integer overflow
CVE-2016-3078
CWE-190 High
Available
No
7.0.6 20.07.2022 SB20220720127
SB2016062313
SB2016062314
#VU110258 - Memory corruption
CVE-2016-4544
CWE-119 High
No
No
7.0.6 20.07.2022 SB20220720127
SB2016042805
SB2016042806
#VU110256 - Memory corruption
CVE-2016-7480
CWE-119 High
Available
No
7.0.11 20.07.2022 SB20220720126
#VU65292 - Heap-based Buffer Overflow
CVE-2022-31627
CWE-122 High
No
No
8.0.21, 8.1.8 14.07.2022 SB2022071404
SB2022071405
SB2022072549
and 5 more
#VU110521 - Improper input validation
CVE-2004-0542
CWE-20 High
No
No
4.3.7 01.07.2022 SB2022070127
#VU64232 - Use of Uninitialized Resource
CVE-2022-31625
CWE-908 High
No
No
7.4.30, 8.0.20, 8.1.7 14.06.2022 SB2022061403
SB2022061404
SB2022061529
and 23 more
#VU64231 - Memory corruption
CVE-2022-31626
CWE-119 High
Available
No
7.4.30, 8.0.20, 8.1.7 14.06.2022 SB2022061403
SB2022061404
SB2022061529
and 25 more
#VU110269 - Double Free
CVE-2015-8880
CWE-415 High
No
No
7.0.1 01.03.2022 SB2022030139
#VU60707 - Use After Free
CVE-2021-21708
CWE-416 Medium
Available
No
7.4.28, 8.0.16, 8.1.3 18.02.2022 SB2022021804
SB2022021813
SB2022022118
and 19 more
#VU58331 - Improper input validation
CVE-2021-21707
CWE-20 Medium
No
No
7.3.33, 7.4.26, 8.0.13 23.11.2021 SB2021112317
SB2021112318
SB2022011821
and 21 more
#VU57656 - Out-of-bounds write
CVE-2021-21703
CWE-787 Low
No
No
7.4.25, 8.0.12 26.10.2021 SB2021102621
SB2021102719
SB2022012745
and 20 more


Showing elements 81 - 100 out of 695