Known vulnerabilities in php7-bcmath-debuginfo
Vendor:
SUSE
Software:
php7-bcmath-debuginfo
Software CPE:
cpe:2.3:o:suse:php7-bcmath-debuginfo:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
53
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.4.33-150400.4.68.1
7.4.33-150400.4.63.1
7.4.33-150400.4.60.1
7.4.33-150400.4.55.1
7.4.33-150200.3.76.1
7.4.33-150400.4.48.1
7.4.33-150400.4.43.1
7.4.33-150400.4.40.1
7.4.33-150400.4.37.1
7.4.33-150200.3.65.1
7.4.33-150400.4.34.1
7.4.33-150400.4.28.1
7.4.33-150200.3.60.1
7.4.33-150200.3.57.1
7.4.33-150400.4.25.1
7.4.33-150400.4.22.1
7.4.6-150200.3.38.2
7.4.6-3.35.1
7.4.6-3.32.1
7.2.5-4.89.4
7.4.33-150400.4.19.1
7.2.34-150000.4.109.1
7.4.33-150200.3.51.1
7.2.34-150000.4.106.1
7.4.33-150400.4.16.1
7.4.33-150200.3.46.2
7.2.34-150000.4.103.1
7.4.33-150400.4.13.1
7.4.6-150200.3.41.1
7.4.6-3.29.1
7.2.5-4.79.1
7.4.6-3.22.1
Vulnerabilities (53)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140833 - Uncontrolled Recursion CVE-2026-7260 |
CWE-674 | Low | 7.4.33-150400.4.68.1 | 03.08.2026 |
SB2026080395 SB2026080397 SB2026080398 and 5 more |
||
| #VU140832 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-17543 |
CWE-89 | High | 7.4.33-150400.4.68.1 | 03.08.2026 |
SB2026080395 SB2026080397 SB2026080398 and 5 more |
||
| #VU140831 - Improper input validation CVE-2026-9672 |
CWE-20 | Medium | 7.4.33-150400.4.68.1 | 03.08.2026 |
SB2026080395 SB2026080396 SB2026080603 and 3 more |
||
| #VU137286 - Memory corruption CVE-2026-14355 |
CWE-119 | Medium | 7.4.33-150400.4.63.1 | 09.07.2026 |
SB2026070955 SB2026070956 SB2026071356 and 16 more |
||
| #VU130909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-6735 |
CWE-79 | Medium | 7.4.33-150400.4.60.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 19 more |
||
| #VU130913 - Use After Free CVE-2026-6722 |
CWE-416 | Medium | 7.4.33-150400.4.60.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 17 more |
||
| #VU130914 - Use After Free CVE-2026-7261 |
CWE-416 | Medium | 7.4.33-150400.4.60.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 17 more |
||
| #VU130915 - NULL Pointer Dereference CVE-2026-7262 |
CWE-476 | Medium | 7.4.33-150400.4.60.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 19 more |
||
| #VU130916 - Integer overflow CVE-2026-7568 |
CWE-190 | Medium | 7.4.33-150400.4.60.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 19 more |
||
| #VU130917 - Type conversion CVE-2026-7258 |
CWE-704 | Medium | 7.4.33-150400.4.60.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 17 more |
||
| #VU120271 - Heap-based Buffer Overflow CVE-2025-14178 |
CWE-122 | High | 7.4.33-150400.4.55.1 | 23.12.2025 |
SB2025122340 SB2025122342 SB2026010709 and 33 more |
||
| #VU105644 - Improper input validation CVE-2025-1217 |
CWE-20 | Medium | 7.4.33-150200.3.76.1, 7.4.33-150400.4.48.1 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105643 - Improper input validation CVE-2025-1734 |
CWE-20 | Medium | 7.4.33-150200.3.76.1, 7.4.33-150400.4.48.1 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105642 - Improper input validation CVE-2025-1861 |
CWE-20 | Low | 7.4.33-150200.3.76.1, 7.4.33-150400.4.48.1 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105641 - Improper Authentication CVE-2025-1736 |
CWE-287 | Medium | 7.4.33-150200.3.76.1, 7.4.33-150400.4.48.1 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105640 - Resource Management Errors CVE-2025-1219 |
CWE-399 | Low | 7.4.33-150200.3.76.1, 7.4.33-150400.4.48.1 | 12.03.2025 |
SB2025031231 SB2025031232 SB2025031233 and 20 more |
||
| #VU105639 - Use After Free CVE-2024-11235 |
CWE-416 | Medium | 7.4.33-150200.3.76.1, 7.4.33-150400.4.48.1 | 12.03.2025 |
SB2025031231 SB2025031232 SB2025031233 and 10 more |
||
| #VU100674 - Buffer over-read CVE-2024-11233 |
CWE-126 | Medium | 7.4.33-150400.4.43.1 | 19.11.2024 |
SB2024111985 SB2024112137 SB2024112138 and 16 more |
||
| #VU100673 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2024-11234 |
CWE-93 | Medium | 7.4.33-150400.4.43.1 | 19.11.2024 |
SB2024111985 SB2024112137 SB2024112138 and 15 more |
||
| #VU100671 - Buffer over-read CVE-2024-8929 |
CWE-126 | Medium | 7.4.33-150400.4.43.1 | 19.11.2024 |
SB2024111985 SB2024112137 SB2024112138 and 15 more |
Showing elements 1 - 20 out of 53