Skip to contentPhp Group Php vulnerabilities
- php, fedoraproject fedora +1 moreFilter bypass in filter_var (FILTER_VALIDATE_URL)CVE-2024-5458Fix availableEPSS 12.1%5.3 Medium
- php, debian linux +1 morePHP function password_verify can erroneously return true when argument contains NULCVE-2024-3096Fix available6.5 Medium
- php group php, php archive tar +1 more__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fixCVE-2024-2756Fix availableEPSS 38.1%6.5 Medium
- php, fedoraproject fedora +1 moreCommand injection via array-ish $command parameter of proc_open()CVE-2024-1874Public exploitFix availableEPSS 32.8%9.4 Critical
- phpPHP mb_encode_mimeheader runs endlessly for some inputsCVE-2024-2757Fix available7.5 High
- php, fedoraproject fedora +1 morePHP is vulnerable to the Marvin AttackCVE-2024-2408Fix available5.9 Medium
- php, debian linux, fedoraproject fedora +2 moreBuffer overflow and overread in phar_dir_read()CVE-2023-3824Public exploitFix availableEPSS 21.8%9.4 Critical
- php, debian linux, fedoraproject fedora +2 moreSecurity issue with external entity loading in XML without enabling itCVE-2023-3823Fix available8.6 High
- phpMissing error check and insufficient random bytes in HTTP Digest authentication for SOAPCVE-2023-3247Fix available2.6 Low
- phpArray overrun in common path resolve codeCVE-2023-0568Fix available7.5 High
- phpDoS vulnerability when parsing multipart request bodyCVE-2023-0662Fix available7.5 High
- phppassword_verify() always returns true for some invalid hashesCVE-2023-0567Fix available7.7 High
- phpPDO::quote() may return unquoted stringCVE-2022-31631Fix available9.1 Critical
- phpOOB read due to insufficient input validation in imageloadfont()CVE-2022-31630Public exploitFix available6.5 Medium
- php, debian linux, fedoraproject fedora +2 more$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilitiesCVE-2022-31629Public exploitFix availableEPSS 49.6%6.5 Medium
- php, debian linux, fedoraproject fedora +2 morephar wrapper can occur dos when using quine gzip fileCVE-2022-31628Fix available2.3 Low
- phpHeap buffer overflow in finfo_bufferCVE-2022-31627Fix available7.7 High
- php, debian linux +1 moremysqlnd/pdo password buffer overflowCVE-2022-31626Public exploitFix availableEPSS 58.1%7.5 High
- php, debian linux +1 moreFreeing unallocated memory in php_pgsql_free_params()CVE-2022-31625Fix available8.1 High
- phpUAF due to php_filter_float() failingCVE-2021-21708Fix available8.2 High
- php, debian linux, netapp clustered data ontap +1 more +3 moreSpecial characters break path parsing in XML functionsCVE-2021-21707Public exploitFix availableEPSS 25.3%5.3 Medium
- php, debian linux, fedoraproject fedora +2 more +4 morePHP-FPM memory access in root process leading to privilege escalationCVE-2021-21703Fix available7.8 High
- phpZipArchive::extractTo may extract outside of destination dirCVE-2021-21706Fix available5.3 Medium
- php, netapp clustered data ontap, oracle sd-wan aware +2 moreIncorrect URL validation in FILTER_VALIDATE_URLCVE-2021-21705Fix available4.3 Medium
- php, netapp clustered data ontap +1 moreMultiple vulnerabilities in Firebird client extensionCVE-2021-21704Fix available5.0 Medium
- php, debian linux, netapp clustered data ontap +1 more +3 moreNull Dereference in SoapClientCVE-2021-21702Fix available5.3 Medium
- php, debian linux, netapp clustered data ontap +2 moreFILTER_VALIDATE_URL accepts URLs with invalid userinfoCVE-2020-7071Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070Fix available4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- php, debian linux, tenable tenable.sc +2 moreUse of freed hash key in the phar_parse_zipfile functionCVE-2020-7068Fix available4.8 Medium
- phpTemporary files are not cleaned after OOM when parsing HTTP request dataCVE-2019-11048Fix available5.3 Medium
- php, debian linux, oracle communications diameter signaling router +1 more +3 moreOOB Read in urldecode()CVE-2020-7067Fix available7.5 High
- php, debian linux, opensuse leap +1 more +3 moreget_headers() silently truncates after a null byteCVE-2020-7066Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moremb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_fullCVE-2020-7065Fix available7.4 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreUse-of-uninitialized-value in exifCVE-2020-7064Fix available6.5 Medium
- php, debian linux, opensuse leap +1 more +3 moreFiles added to tar with Phar::buildFromIterator have all-access permissionsCVE-2020-7063Fix available5.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreNull Pointer Dereference in PHP Session Upload ProgressCVE-2020-7062Fix available7.5 High
- php, tenable tenable.sc +1 moreheap-buffer-overflow in phar_extract_fileCVE-2020-7061Fix available6.5 Medium
- phpUse-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6...CVE-2014-36229.8 Critical
- php, debian linux, opensuse leap +2 more +4 moreglobal buffer-overflow in mbfl_filt_conv_big5_wcharCVE-2020-7060Fix available6.5 Medium
- php, debian linux, opensuse leap +2 more +4 moreOOB read in php_strip_tags_exCVE-2020-7059Fix available6.5 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free in exif parsing under memory sanitizerCVE-2019-11050Fix available4.8 Medium
- php, debian linux, fedoraproject fedora +1 more +3 moremail() may release string with refcount==1 twiceCVE-2019-110496.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreHeap-buffer-overflow READ in exifCVE-2019-11047Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreBuffer underflow in bc_shift_addsubCVE-2019-11046Fix available3.7 Low
- php, canonical ubuntu linux, debian linux +3 more +5 moreDirectoryIterator class silently truncates after a null byteCVE-2019-11045Fix available3.7 Low
- php, fedoraproject fedora, tenable security center +2 morelink() silently truncates after a null byte on WindowsCVE-2019-110443.7 Low
- php, zend framework, zendframework +1 more +3 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2011-1939Public exploitFix available9.8 Critical
- php, canonical ubuntu linux, debian linux +21 more +23 moreUnderflow in PHP-FPM can lead to RCECVE-2019-11043In KEVPublic exploitFix availableEPSS 99.8%8.7 High
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_process_user_comment in EXIF extensionCVE-2019-11042Fix available4.8 Medium
- Show moreLoading…