Known vulnerabilities in PHP - page 6

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55265 - Double Free
CVE-2019-11049
CWE-415 High
No
No
7.3.13 22.07.2021 SB2019122369
SB2021072292
SB2020021832
and 2 more
#VU110516 - Improper input validation
CVE-2004-1064
CWE-20 High
No
No
4.3.9, 5.0.2 08.12.2020 SB2020120863
SB2004121901
#VU110515 - Improper input validation
CVE-2004-1063
CWE-20 High
No
No
4.3.9, 5.0.2 08.12.2020 SB2020120863
SB2004121901
#VU110512 - Improper input validation
CVE-2004-1018
CWE-20 High
Available
No
4.3.10 08.12.2020 SB2020120862
#VU47253 - Cryptographic Issues
CVE-2020-7069
CWE-310 Low
No
No
7.2.34, 7.3.23, 7.4.11 02.10.2020 SB2020100201
SB2020100220
SB2020102043
and 16 more
#VU47252 - Improper input validation
CVE-2020-7070
CWE-20 Medium
No
No
7.2.34, 7.3.23, 7.4.11 02.10.2020 SB2020100201
SB2020100221
SB2020102043
and 16 more
#VU34121 - Use After Free
CVE-2020-7068
CWE-416 Medium
No
No
7.2.33, 7.3.21, 7.4.9 07.08.2020 SB2020080711
SB2020090106
SB2020090721
and 15 more
#VU28318 - Resource exhaustion
CVE-2019-11048
CWE-400 Medium
No
No
7.2.31, 7.3.18, 7.4.6 28.05.2020 SB2020052806
SB2020052807
SB2020062301
and 12 more
#VU26979 - Out-of-bounds read
CVE-2020-7067
CWE-125 Medium
No
No
7.2.30, 7.3.17, 7.4.5 16.04.2020 SB2020041609
SB2020051426
SB2020051427
and 5 more
#VU26260 - Stack-based buffer overflow
CVE-2020-7065
CWE-121 High
No
No
7.3.16, 7.4.4 20.03.2020 SB2020032006
SB2020032625
SB2020051109
and 9 more
#VU26259 - Out-of-bounds read
CVE-2020-7064
CWE-125 Low
No
No
7.2.29, 7.3.16, 7.4.4 20.03.2020 SB2020032006
SB2020032625
SB2020051109
and 13 more
#VU26257 - Improper input validation
CVE-2020-7066
CWE-20 Low
No
No
7.2.29, 7.3.16, 7.4.4 20.03.2020 SB2020032006
SB2020032625
SB2020051109
and 13 more
#VU25594 - NULL Pointer Dereference
CVE-2020-7062
CWE-476 Medium
No
No
7.2.28, 7.3.15, 7.4.3 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 12 more
#VU25593 - Heap-based Buffer Overflow
CVE-2020-7061
CWE-122 High
No
No
7.3.15, 7.4.3 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 6 more
#VU25592 - Incorrect Default Permissions
CVE-2020-7063
CWE-276 Low
No
No
7.2.28, 7.3.15, 7.4.3 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 12 more
#VU30361 - Use After Free
CVE-2014-3622
CWE-416 High
No
No
5.6.1 19.02.2020 SB2020021924
#VU25110 - Out-of-bounds read
CVE-2020-7060
CWE-125 High
No
No
7.2.27, 7.3.14, 7.4.2 10.02.2020 SB2020021009
SB2020021722
SB2020022721
and 14 more
#VU25109 - Out-of-bounds read
CVE-2020-7059
CWE-125 High
No
No
7.2.27, 7.3.14, 7.4.2 10.02.2020 SB2020021009
SB2020021722
SB2020022721
and 12 more
#VU33363 - Improper input validation
CVE-2019-11045
CWE-20 Medium
No
No
- 23.12.2019 SB2019122362
SB2019121937
SB2020012030
and 7 more
#VU110514 - Improper input validation
CVE-2004-1020
CWE-20 Medium
Available
No
4.3.10, 5.0.3 11.07.2017 SB2020120862


Showing elements 101 - 120 out of 689