Known vulnerabilities in PHP - page 9

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 695
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 695 known vulnerabilities: 6 critical, 124 high, 373 medium, 192 low Critical High Medium Low

Vulnerabilities (695)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16921 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.1 10.01.2019 SB2019011006
#VU16920 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.1 10.01.2019 SB2019011006
#VU16919 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.1 10.01.2019 SB2019011006
#VU16918 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Low
No
No
7.3.1 10.01.2019 SB2019011006
#VU16917 - Buffer overflow
CVE-2019-9023
CWE-120 Low
No
No
5.6.40, 7.1.26, 7.3.1 10.01.2019 SB2019011006
#VU16916 - Out-of-bounds write
CVE-2019-6977
CWE-787 High
Available
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 10.01.2019 SB2019011006
SB2019020608
SB2019021916
and 14 more
#VU16915 - Error Handling
CWE-388 Low
No
No
7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16914 - NULL Pointer Dereference
CVE-2018-19935
CWE-476 Low
No
No
7.1.26, 7.2.14 10.01.2019 SB2019011006
SB2018072423
SB2018072424
and 2 more
#VU16913 - Buffer overflow
CVE-2019-9023
CWE-120 Low
No
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16912 - Heap-based Buffer Overflow
CVE-2019-9023
CWE-122 Low
No
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16911 - Heap-based Buffer Overflow
CVE-2019-9023
CWE-122 Low
No
No
7.1.26, 7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16910 - Heap-based Buffer Overflow
CVE-2019-9023
CWE-122 Low
No
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16909 - Buffer overflow
CVE-2019-9023
CWE-120 Low
No
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16908 - Heap-based Buffer Overflow
CVE-2019-9023
CWE-122 Low
No
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16907 - Reachable Assertion
CWE-617 Low
No
No
7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16317 - Heap-based Buffer Overflow
CVE-2018-20783
CWE-122 Low
No
No
5.6.39, 7.0.33, 7.1.25, 7.2.13, 7.3.0 07.12.2018 SB2018120716
#VU16316 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-19158
CWE-78 Low
No
No
5.6.39, 7.0.33, 7.1.25, 7.3.0 07.12.2018 SB2018120716
SB2018120830
#VU16315 - NULL Pointer Dereference
CVE-2018-19935
CWE-476 Low
No
No
5.6.39, 7.0.33, 7.3.0 07.12.2018 SB2018120716
SB2018121101
SB2019011305
and 3 more
#VU16314 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
5.6.39, 7.0.33, 7.1.25, 7.2.13, 7.3.0 07.12.2018 SB2018120716
#VU7574 - Integer underflow
CVE-2016-10166
CWE-191 High
No
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 19.07.2017 SB2017071905
SB2019011006
SB2017022702
and 6 more


Showing elements 161 - 180 out of 695