Known vulnerabilities in PHP - page 7

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55265 - Double Free
CVE-2019-11049
CWE-415 High
No
No
7.3.13 22.07.2021 SB2019122369
SB2021072292
SB2020021832
and 2 more
#VU25594 - NULL Pointer Dereference
CVE-2020-7062
CWE-476 Medium
No
No
7.2.28, 7.3.15, 7.4.3 25.02.2020 SB2020022518
SB2020031403
SB2020031404
and 12 more
#VU30361 - Use After Free
CVE-2014-3622
CWE-416 High
No
No
5.6.1 19.02.2020 SB2020021924
#VU25110 - Out-of-bounds read
CVE-2020-7060
CWE-125 High
No
No
7.2.27, 7.3.14, 7.4.2 10.02.2020 SB2020021009
SB2020021722
SB2020022721
and 14 more
#VU25109 - Out-of-bounds read
CVE-2020-7059
CWE-125 High
No
No
7.2.27, 7.3.14, 7.4.2 10.02.2020 SB2020021009
SB2020021722
SB2020022721
and 12 more
#VU33363 - Improper input validation
CVE-2019-11045
CWE-20 Medium
No
No
- 23.12.2019 SB2019122362
SB2019121937
SB2020012030
and 7 more
#VU33364 - Out-of-bounds read
CVE-2019-11047
CWE-125 Medium
No
No
- 23.12.2019 SB2019122363
SB2019121938
SB2020012030
and 7 more
#VU34943 - Improper input validation
CVE-2019-11044
CWE-20 Medium
No
No
- 23.12.2019 SB2019122364
SB2021072292
SB2019121738
and 1 more
#VU35071 - Improper input validation
CVE-2010-4657
CWE-20 Medium
No
No
5.4.4 13.11.2019 SB2019111362
#VU22304 - Memory corruption
CVE-2019-11043
CWE-119 High
Available
Exploited
7.1.33, 7.2.24, 7.3.11 27.10.2019 SB2019102707
SB2019102708
SB2019102709
and 22 more
#VU31994 - Missing release of memory after effective lifetime
CVE-2019-16713
CWE-401 Medium
No
No
- 23.09.2019 SB2019092320
SB2019111603
SB2019111530
and 10 more
#VU31995 - Missing release of memory after effective lifetime
CVE-2019-16712
CWE-401 Medium
No
No
- 23.09.2019 SB2019092321
SB2019111603
SB2019111530
and 9 more
#VU31996 - Missing release of memory after effective lifetime
CVE-2019-16711
CWE-401 Medium
No
No
- 23.09.2019 SB2019092322
SB2019111603
SB2019111530
and 10 more
#VU31997 - Missing release of memory after effective lifetime
CVE-2019-16710
CWE-401 Medium
No
No
- 23.09.2019 SB2019092323
SB2019111603
SB2019111530
and 10 more
#VU31998 - Missing release of memory after effective lifetime
CVE-2019-16709
CWE-401 Medium
No
No
- 23.09.2019 SB2019092324
SB2019111603
SB2019111530
and 11 more
#VU31999 - Missing release of memory after effective lifetime
CVE-2019-16708
CWE-401 Medium
No
No
- 23.09.2019 SB2019092325
SB2019111603
SB2019111530
and 10 more
#VU31010 - Improper input validation
CVE-2017-7189
CWE-20 Medium
No
No
7.0.16 10.07.2019 SB2019071037
#VU32023 - Out-of-bounds read
CVE-2019-11597
CWE-125 High
No
No
- 29.04.2019 SB2019042909
SB2019072327
SB2019070116
and 12 more
#VU32024 - Divide By Zero
CVE-2019-11472
CWE-369 Medium
No
No
- 23.04.2019 SB2019042316
SB2019070116
SB2019062416
and 14 more
#VU32028 - Missing release of memory after effective lifetime
CVE-2019-10649
CWE-401 Medium
No
No
- 30.03.2019 SB2019033011
SB2019040465
SB2020070179


Showing elements 121 - 140 out of 695