Known vulnerabilities in PHP - page 5

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110270 - Improper input validation
CVE-2015-8879
CWE-20 Medium
No
No
5.5.38 29.08.2022 SB2022082949
#VU110555 - Improper input validation
CVE-1999-0238
CWE-20 High
Available
No
- 17.08.2022 SB2022081762
#VU110340 - Heap-based Buffer Overflow
CVE-2008-2371
CWE-122 Medium
No
No
- 01.08.2022 SB2022080177
SB2008070702
#VU110257 - Integer overflow
CVE-2016-3078
CWE-190 High
Available
No
7.0.6 20.07.2022 SB20220720127
SB2016062313
SB2016062314
#VU110258 - Memory corruption
CVE-2016-4544
CWE-119 High
No
No
7.0.6 20.07.2022 SB20220720127
SB2016042805
SB2016042806
#VU110256 - Memory corruption
CVE-2016-7480
CWE-119 High
Available
No
7.0.11 20.07.2022 SB20220720126
#VU65292 - Heap-based Buffer Overflow
CVE-2022-31627
CWE-122 High
No
No
8.0.21, 8.1.8 14.07.2022 SB2022071404
SB2022071405
SB2022072549
and 5 more
#VU110521 - Improper input validation
CVE-2004-0542
CWE-20 High
No
No
4.3.7 01.07.2022 SB2022070127
#VU64232 - Use of Uninitialized Resource
CVE-2022-31625
CWE-908 High
No
No
7.4.30, 8.0.20, 8.1.7 14.06.2022 SB2022061403
SB2022061404
SB2022061529
and 23 more
#VU64231 - Memory corruption
CVE-2022-31626
CWE-119 High
Available
No
7.4.30, 8.0.20, 8.1.7 14.06.2022 SB2022061403
SB2022061404
SB2022061529
and 25 more
#VU110269 - Double Free
CVE-2015-8880
CWE-415 High
No
No
7.0.1 01.03.2022 SB2022030139
#VU60707 - Use After Free
CVE-2021-21708
CWE-416 Medium
Available
No
7.4.28, 8.0.16, 8.1.3 18.02.2022 SB2022021804
SB2022021813
SB2022022118
and 19 more
#VU58331 - Improper input validation
CVE-2021-21707
CWE-20 Medium
No
No
7.3.33, 7.4.26, 8.0.13 23.11.2021 SB2021112317
SB2021112318
SB2022011821
and 21 more
#VU57656 - Out-of-bounds write
CVE-2021-21703
CWE-787 Low
No
No
7.4.25, 8.0.12 26.10.2021 SB2021102621
SB2021102719
SB2022012745
and 20 more
#VU56905 - Absolute Path Traversal
CVE-2021-21706
CWE-36 Medium
No
No
7.3.31, 7.4.24, 8.0.11 29.09.2021 SB2021092901
SB2021093001
SB2022111831
and 1 more
#VU54566 - Stack-based buffer overflow
CVE-2021-21704
CWE-121 High
No
No
7.3.29, 7.4.21, 8.0.8 06.07.2021 SB2021070611
SB2021070612
SB2021070613
and 17 more
#VU54565 - Server-Side Request Forgery (SSRF)
CVE-2021-21705
CWE-918 Medium
No
No
7.3.29, 7.4.21, 8.0.8 06.07.2021 SB2021070611
SB2021070612
SB2021070613
and 21 more
#VU110379 - Improper Control of Generation of Code ('Code Injection')
CVE-2007-4596
CWE-94 Medium
Available
No
- 29.03.2021 SB2021032940
#VU50403 - NULL Pointer Dereference
CVE-2021-21702
CWE-476 Medium
No
No
7.3.27, 7.4.15, 8.0.2 07.02.2021 SB2021020704
SB2021020705
SB2021020707
and 19 more
#VU49338 - Improper input validation
CVE-2020-7071
CWE-20 Medium
No
No
7.3.26, 7.4.14, 8.0.1 07.01.2021 SB2021010720
SB2021010722
SB2021010903
and 17 more


Showing elements 81 - 100 out of 689