Known vulnerabilities in PHP - page 9

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16921 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.1 10.01.2019 SB2019011006
#VU16920 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.1 10.01.2019 SB2019011006
#VU16919 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.1 10.01.2019 SB2019011006
#VU16918 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Low
No
No
7.3.1 10.01.2019 SB2019011006
#VU16917 - Buffer overflow
CVE-2019-9023
CWE-120 Low
No
No
5.6.40, 7.1.26, 7.3.1 10.01.2019 SB2019011006
#VU16916 - Out-of-bounds write
CVE-2019-6977
CWE-787 High
Available
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 10.01.2019 SB2019011006
SB2019020608
SB2019021916
and 14 more
#VU16915 - Error Handling
CWE-388 Low
No
No
7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16914 - NULL Pointer Dereference
CVE-2018-19935
CWE-476 Low
No
No
7.1.26, 7.2.14 10.01.2019 SB2019011006
SB2018072423
SB2018072424
and 2 more
#VU16913 - Buffer overflow
CVE-2019-9023
CWE-120 Low
No
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 10.01.2019 SB2019011006
#VU16323 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16322 - Memory corruption
CWE-119 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16321 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16320 - Improper input validation
CWE-20 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16319 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Low
No
No
7.3.0 07.12.2018 SB2018120716
#VU16318 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.1.25, 7.2.13 07.12.2018 SB2018120716
#VU16317 - Heap-based Buffer Overflow
CVE-2018-20783
CWE-122 Low
No
No
5.6.39, 7.0.33, 7.1.25, 7.2.13, 7.3.0 07.12.2018 SB2018120716
#VU16316 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-19158
CWE-78 Low
No
No
5.6.39, 7.0.33, 7.1.25, 7.3.0 07.12.2018 SB2018120716
SB2018120830
#VU16315 - NULL Pointer Dereference
CVE-2018-19935
CWE-476 Low
No
No
5.6.39, 7.0.33, 7.3.0 07.12.2018 SB2018120716
SB2018121101
SB2019011305
and 3 more
#VU16314 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
5.6.39, 7.0.33, 7.1.25, 7.2.13, 7.3.0 07.12.2018 SB2018120716
#VU7574 - Integer underflow
CVE-2016-10166
CWE-191 High
No
No
5.6.40, 7.1.26, 7.2.14, 7.3.1 19.07.2017 SB2017071905
SB2019011006
SB2017022702
and 6 more


Showing elements 161 - 180 out of 689