Known vulnerabilities in php (Red Hat package)
Vendor:
Red Hat Inc.
Software:
php (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:php_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
36
Public exploits:
7
Known exploited (KEV):
2
Breakdown by Severity Chart
8.3.33-1.el10_2
8.3.32-1.el10_2
8.3.31-1.el10_2
8.0.30-1.el9_2.1
8.0.13-2.el9_0.1
8.0.30-3.el9_6.1
8.0.30-1.el9_4.1
8.0.30-5.el9_7
8.3.29-1.el10_1
8.3.19-1.el10_0.1
8.0.30-3.el9_6
5.3.3-27.el6_5.3
5.4.16-23.el7_0.1
5.1.6-27.el5_6.7
5.1.6-40.el5_9.2
4.3.9-3.37.el4.1
5.1.6-27.el5_6.6
5.1.6-40.el5_9.1
5.3.3-3.el6_2.11
5.3.3-14.el6_3.3
5.3.3-23.el6_4.1
5.1.6-27.el5_6.5
5.3.3-3.el6_2.10
5.3.3-14.el6_3.1
5.1.6-27.el5_6.4
5.3.3-3.el6_1.4
5.1.6-27.el5_7.5
5.3.3-3.el6_2.6
5.1.6-27.el5_7.4
5.3.3-3.el6_2.5
5.3.3-3.el6_1.3
5.3.2-6.el6_0.1
5.1.6-27.el5_5.3
5.1.6-24.el5_4.5
5.1.6-3.el4s1.10
5.1.6-20.el5_2.1
5.1.6-3.el4s1.8
5.1.6-3.el4s1.7
5.1.6-3.el4s1.6
5.1.6-3.el4s1.5
5.1.4-1.el4s1.5
5.1.4-1.el4s1.4
8.0.30-1.el9_2
8.0.27-1.el9_1
8.0.20-3.el9
8.0.13-2.el9_0
5.4.16-46.1.el7_6
5.4.16-48.el7
5.4.16-46.1.el7_7
5.4.16-43.el7_4
5.1.6-7.el5
5.1.6-11.el5
5.1.6-12.el5
5.1.6-15.el5
5.2.3-3.el5s2
5.2.6-2.el5s2
5.1.6-23.2.el5_3
5.2.6-4.el5s2
5.2.9-2.el5s2
5.1.6-34.el5_8
5.2.10-2.el5s2
5.1.6-39.el5_8
5.1.6-40.el5_9
4.3.9-3.37.el4
5.1.6-43.el5_10
5.1.6-44.el5_10
5.4.16-23.el7_0
5.1.6-45.el5_11
4.3.9-3.38.el4
5.4.16-36.el7_1
5.4.16-36.3.el7_2
5.4.16-42.el7
5.3.3-50.el6_10
5.3.3-49.el6
5.3.3-3.el6_2
5.3.3-3.el6_1
5.3.3-3.el6
5.3.2-6.el6_0
5.3.2-6.el6
5.3.3-48.el6_8
5.3.3-47.el6
5.3.3-46.el6_7
5.3.3-46.el6_6
5.3.3-40.el6_6
5.3.3-38.el6
5.3.3-27.el6_5
5.3.3-26.el6
5.3.3-23.el6_4
5.3.3-22.el6
5.3.3-14.el6_3
Vulnerabilities (36)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140833 - Uncontrolled Recursion CVE-2026-7260 |
CWE-674 | Low | 8.3.33-1.el10_2 | 03.08.2026 |
SB2026080395 SB2026080397 SB2026080398 and 15 more |
||
| #VU140832 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-17543 |
CWE-89 | High | 8.3.33-1.el10_2 | 03.08.2026 |
SB2026080395 SB2026080397 SB2026080398 and 14 more |
||
| #VU137285 - Uncaught Exception CVE-2026-12184 |
CWE-248 | Medium | 8.3.32-1.el10_2 | 09.07.2026 |
SB2026051001 SB2026071918 SB2026071919 and 5 more |
||
| #VU137286 - Memory corruption CVE-2026-14355 |
CWE-119 | Medium | 8.3.32-1.el10_2 | 09.07.2026 |
SB2026070955 SB2026070956 SB2026071356 and 17 more |
||
| #VU130909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-6735 |
CWE-79 | Medium | 8.3.31-1.el10_2 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 19 more |
||
| #VU130910 - NULL Pointer Dereference CVE-2026-7259 |
CWE-476 | Medium | 8.3.31-1.el10_2 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 14 more |
||
| #VU130915 - NULL Pointer Dereference CVE-2026-7262 |
CWE-476 | Medium | 8.3.31-1.el10_2 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 20 more |
||
| #VU130916 - Integer overflow CVE-2026-7568 |
CWE-190 | Medium | 8.3.31-1.el10_2 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 20 more |
||
| #VU130917 - Type conversion CVE-2026-7258 |
CWE-704 | Medium | 8.3.31-1.el10_2 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 17 more |
||
| #VU120272 - Missing release of memory after effective lifetime CVE-2025-14177 |
CWE-401 | Medium | 8.0.30-5.el9_7, 8.3.29-1.el10_1 | 23.12.2025 |
SB2025122340 SB2025122342 SB2026010709 and 20 more |
||
| #VU120271 - Heap-based Buffer Overflow CVE-2025-14178 |
CWE-122 | High | 8.0.13-2.el9_0.1, 8.0.30-1.el9_2.1, 8.0.30-1.el9_4.1, 8.0.30-3.el9_6.1, 8.0.30-5.el9_7, 8.3.19-1.el10_0.1, 8.3.29-1.el10_1 | 23.12.2025 |
SB2025122340 SB2025122342 SB2026010709 and 33 more |
||
| #VU120270 - NULL Pointer Dereference CVE-2025-14180 |
CWE-476 | Medium | 8.3.19-1.el10_0.1, 8.3.29-1.el10_1 | 23.12.2025 |
SB2025122340 SB2025122342 SB2026010709 and 18 more |
||
| #VU105644 - Improper input validation CVE-2025-1217 |
CWE-20 | Medium | 8.0.30-3.el9_6 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105643 - Improper input validation CVE-2025-1734 |
CWE-20 | Medium | 8.0.30-3.el9_6 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105642 - Improper input validation CVE-2025-1861 |
CWE-20 | Low | 8.0.30-3.el9_6 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105641 - Improper Authentication CVE-2025-1736 |
CWE-287 | Medium | 8.0.30-3.el9_6 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105640 - Resource Management Errors CVE-2025-1219 |
CWE-399 | Low | 8.0.30-3.el9_6 | 12.03.2025 |
SB2025031231 SB2025031232 SB2025031233 and 20 more |
||
| #VU72167 - Out-of-bounds write CVE-2023-0568 |
CWE-787 | Medium | 8.0.30-1.el9_2 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 27 more |
||
| #VU72166 - Use of Insufficiently Random Values CVE-2023-0567 |
CWE-330 | Medium | 8.0.30-1.el9_2 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 23 more |
||
| #VU72165 - Improper input validation CVE-2023-0662 |
CWE-20 | Medium | 8.0.30-1.el9_2 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 25 more |
Showing elements 1 - 20 out of 36