Known vulnerabilities in PHP - page 7

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33364 - Out-of-bounds read
CVE-2019-11047
CWE-125 Medium
No
No
- 23.12.2019 SB2019122363
SB2019121938
SB2020012030
and 7 more
#VU34943 - Improper input validation
CVE-2019-11044
CWE-20 Medium
No
No
- 23.12.2019 SB2019122364
SB2021072292
SB2019121738
and 1 more
#VU35071 - Improper input validation
CVE-2010-4657
CWE-20 Medium
No
No
5.4.4 13.11.2019 SB2019111362
#VU22304 - Memory corruption
CVE-2019-11043
CWE-119 High
Available
Exploited
7.1.33, 7.2.24, 7.3.11 27.10.2019 SB2019102707
SB2019102708
SB2019102709
and 22 more
#VU31994 - Missing release of memory after effective lifetime
CVE-2019-16713
CWE-401 Medium
No
No
- 23.09.2019 SB2019092320
SB2019111603
SB2019111530
and 10 more
#VU31995 - Missing release of memory after effective lifetime
CVE-2019-16712
CWE-401 Medium
No
No
- 23.09.2019 SB2019092321
SB2019111603
SB2019111530
and 9 more
#VU31996 - Missing release of memory after effective lifetime
CVE-2019-16711
CWE-401 Medium
No
No
- 23.09.2019 SB2019092322
SB2019111603
SB2019111530
and 10 more
#VU31997 - Missing release of memory after effective lifetime
CVE-2019-16710
CWE-401 Medium
No
No
- 23.09.2019 SB2019092323
SB2019111603
SB2019111530
and 10 more
#VU31998 - Missing release of memory after effective lifetime
CVE-2019-16709
CWE-401 Medium
No
No
- 23.09.2019 SB2019092324
SB2019111603
SB2019111530
and 11 more
#VU31999 - Missing release of memory after effective lifetime
CVE-2019-16708
CWE-401 Medium
No
No
- 23.09.2019 SB2019092325
SB2019111603
SB2019111530
and 10 more
#VU31010 - Improper input validation
CVE-2017-7189
CWE-20 Medium
No
No
7.0.16 10.07.2019 SB2019071037
#VU32023 - Out-of-bounds read
CVE-2019-11597
CWE-125 High
No
No
- 29.04.2019 SB2019042909
SB2019072327
SB2019070116
and 12 more
#VU32024 - Divide By Zero
CVE-2019-11472
CWE-369 Medium
No
No
- 23.04.2019 SB2019042316
SB2019070116
SB2019062416
and 14 more
#VU32028 - Missing release of memory after effective lifetime
CVE-2019-10649
CWE-401 Medium
No
No
- 30.03.2019 SB2019033011
SB2019040465
SB2020070179
#VU31148 - Memory corruption
CVE-2019-9641
CWE-119 High
No
No
7.3.3 09.03.2019 SB2019030904
SB2019042317
SB2018072414
and 1 more
#VU31152 - Memory corruption
CVE-2019-9025
CWE-119 High
No
No
7.3.1 23.02.2019 SB2019022307
#VU17444 - Improper Initialization
CWE-665 Low
No
No
7.2.15, 7.3.2 08.02.2019 SB2019020807
#VU17443 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.2 08.02.2019 SB2019020807
#VU17442 - Memory corruption
CWE-119 Low
No
No
7.3.2 08.02.2019 SB2019020807
#VU17441 - Improper Initialization
CWE-665 Low
No
No
7.3.2 08.02.2019 SB2019020807


Showing elements 121 - 140 out of 689