Known vulnerabilities in php7-exif - page 2
Vendor:
SUSE
Software:
php7-exif
Software CPE:
cpe:2.3:o:suse:php7-exif:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
53
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.4.33-150400.4.68.1
7.4.33-150400.4.63.1
7.4.33-150400.4.60.1
7.4.33-150400.4.55.1
7.4.33-150200.3.76.1
7.4.33-150400.4.48.1
7.4.33-150400.4.43.1
7.4.33-150400.4.40.1
7.4.33-150400.4.37.1
7.4.33-150200.3.65.1
7.4.33-150400.4.34.1
7.4.33-150400.4.28.1
7.4.33-150200.3.60.1
7.4.33-150200.3.57.1
7.4.33-150400.4.25.1
7.4.33-150400.4.22.1
7.4.6-150200.3.38.2
7.4.6-3.35.1
7.4.6-3.32.1
7.2.5-4.89.4
7.4.33-150400.4.19.1
7.2.34-150000.4.109.1
7.4.33-150200.3.51.1
7.2.34-150000.4.106.1
7.4.33-150400.4.16.1
7.4.33-150200.3.46.2
7.2.34-150000.4.103.1
7.4.33-150400.4.13.1
7.4.6-150200.3.41.1
7.4.6-3.29.1
7.2.5-4.79.1
7.4.6-3.22.1
Vulnerabilities (53)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97748 - Improper input validation CVE-2024-8925 |
CWE-20 | Medium | 7.4.33-150400.4.40.1 | 27.09.2024 |
SB2024092724 SB2024100148 SB2024100301 and 16 more |
||
| #VU97747 - Insufficient Logging CVE-2024-9026 |
CWE-778 | Low | 7.4.33-150400.4.40.1 | 27.09.2024 |
SB2024092724 SB2024100148 SB2024101209 and 13 more |
||
| #VU97746 - Security Features CVE-2024-8927 |
CWE-254 | Medium | 7.4.33-150400.4.40.1 | 27.09.2024 |
SB2024092724 SB2024100148 SB2024100301 and 18 more |
||
| #VU91107 - Improper input validation CVE-2024-5458 |
CWE-20 | Medium | 7.4.33-150200.3.65.1, 7.4.33-150400.4.37.1 | 05.06.2024 |
SB2024060501 SB2024060502 SB2024060503 and 18 more |
||
| #VU88484 - Improper Authentication CVE-2024-3096 |
CWE-287 | High | 7.4.33-150200.3.65.1, 7.4.33-150400.4.34.1 | 11.04.2024 |
SB2024041173 SB2024041175 SB2024041176 and 25 more |
||
| #VU88483 - Security Features CVE-2024-2756 |
CWE-254 | Low | 7.4.33-150200.3.65.1, 7.4.33-150400.4.34.1 | 11.04.2024 |
SB2024041173 SB2024041175 SB2024041176 and 24 more |
||
| #VU78978 - Memory corruption CVE-2023-3824 |
CWE-119 | Critical | 7.4.33-150200.3.60.1, 7.4.33-150400.4.28.1 | 06.08.2023 |
SB2023080604 SB2023081704 SB20230821142 and 32 more |
||
| #VU78977 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-3823 |
CWE-611 | High | 7.4.33-150200.3.60.1, 7.4.33-150400.4.28.1 | 06.08.2023 |
SB2023080604 SB2023081704 SB20230821142 and 31 more |
||
| #VU77112 - Use of Insufficiently Random Values CVE-2023-3247 |
CWE-330 | Medium | 7.4.33-150200.3.57.1, 7.4.33-150400.4.25.1 | 09.06.2023 |
SB2023060919 SB2023061105 SB2023061516 and 24 more |
||
| #VU74185 - Memory corruption CVE-2022-4900 |
CWE-119 | Low | 7.4.33-150400.4.22.1 | 30.03.2023 |
SB2023033010 SB2023033014 SB2023041468 and 4 more |
||
| #VU72167 - Out-of-bounds write CVE-2023-0568 |
CWE-787 | Medium | 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 27 more |
||
| #VU72166 - Use of Insufficiently Random Values CVE-2023-0567 |
CWE-330 | Medium | 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 23 more |
||
| #VU72165 - Improper input validation CVE-2023-0662 |
CWE-20 | Medium | 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1 | 14.02.2023 |
SB2023021417 SB2023021526 SB2023022245 and 25 more |
||
| #VU70788 - Integer overflow CVE-2022-31631 |
CWE-190 | Medium | 7.2.34-150000.4.106.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.16.1 | 07.01.2023 |
SB2023010702 SB2023010704 SB2023011201 and 21 more |
||
| #VU68886 - Out-of-bounds read CVE-2022-31630 |
CWE-125 | Medium | 7.4.33-150200.3.46.2, 7.4.33-150400.4.13.1 | 01.11.2022 |
SB2022110119 SB2022110336 SB2022110814 and 21 more |
||
| #VU67756 - Security Features CVE-2022-31629 |
CWE-254 | Low | 7.4.33-150200.3.46.2, 7.4.33-150200.3.65.1, 7.4.33-150400.4.13.1, 7.4.33-150400.4.34.1 | 29.09.2022 |
SB2022092960 SB2022093041 SB2022101944 and 49 more |
||
| #VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-31628 |
CWE-835 | Medium | 7.4.33-150200.3.46.2, 7.4.33-150400.4.13.1 | 29.09.2022 |
SB2022092960 SB2022093041 SB2022101944 and 26 more |
||
| #VU47253 - Cryptographic Issues CVE-2020-7069 |
CWE-310 | Low | 7.4.33-150200.3.46.2 | 02.10.2020 |
SB2020100201 SB2020100220 SB2020102043 and 16 more |
||
| #VU47252 - Improper input validation CVE-2020-7070 |
CWE-20 | Medium | 7.4.33-150200.3.46.2 | 02.10.2020 |
SB2020100201 SB2020100221 SB2020102043 and 16 more |
||
| #VU34121 - Use After Free CVE-2020-7068 |
CWE-416 | Medium | 7.4.33-150200.3.46.2 | 07.08.2020 |
SB2020080711 SB2020090106 SB2020090721 and 15 more |
Showing elements 21 - 40 out of 53