Skip to contentPhp vulnerabilities
Newest
- phpBuffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in...CVE-2007-1453Public exploit7.5 High
- phpThe FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks...CVE-2007-1452Public exploit5.0 Medium
- phpBuffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including...CVE-2007-1413Public exploitEPSS 11.2%7.5 High
- phpThe cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent...CVE-2007-1412Public exploit7.8 High
- phpBuffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and...CVE-2007-1411Public exploit6.8 Medium
- phpBuffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions...CVE-2007-1401Public exploit6.9 Medium
- php, pierrejoye php zip +1 moreStack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled...CVE-2007-1399Public exploitEPSS 20.1%9.8 Critical
- phpThe import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when...CVE-2007-13966.8 Medium
- phpInteger overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent...CVE-2007-1383Public exploitEPSS 15.4%10.0 High
- php com extensionsThe PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute...CVE-2007-1382Public exploit6.8 Medium
- phpThe wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified...CVE-2007-1381Public exploit7.6 High
- phpThe php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before...CVE-2007-1380Public exploit5.0 Medium
- phpThe ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an...CVE-2007-13795.1 Medium
- phpThe ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context...CVE-2007-13785.1 Medium
- phpThe shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that...CVE-2007-1376Public exploitEPSS 10.4%7.5 High
- phpInteger overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent...CVE-2007-1375Public exploit5.0 Medium
- phpA regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows...CVE-2007-1287Public exploit4.3 Medium
- phpInteger overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute...CVE-2007-1286Public exploitEPSS 40.9%6.8 Medium
- php, canonical ubuntu linux, novell suse linux +4 more +6 moreThe Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a...CVE-2007-1285Public exploitEPSS 18.8%7.5 High
- php, canonical ubuntu linux +1 moreThe zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64...CVE-2007-09884.3 Medium
- phpOff-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent...CVE-2007-0911Public exploit7.8 High
- php, trustix secure linux +1 moreUnspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global...CVE-2007-091010.0 High
- php, trustix secure linux +1 moreMultiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute...CVE-2007-09097.5 High
- php, canonical ubuntu linux +1 moreThe WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not...CVE-2007-0908Public exploitEPSS 12.5%5.0 Medium
- php, trustix secure linux +1 moreBuffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via...CVE-2007-09075.0 Medium
- php, trustix secure linux +1 moreMultiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and...CVE-2007-09067.5 High
- php, trustix secure linux +1 morePHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via...CVE-2007-09057.5 High
- gd graphics library project graphics library, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreBuffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and...CVE-2007-0455Fix availableEPSS 12.3%7.5 High
- php bloqMultiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to...CVE-2006-6592Public exploit7.5 High
- php ar memberscriptPHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote...CVE-2006-6590Public exploit7.5 High
- php blog cmsPHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and...CVE-2006-6552Public exploit7.5 High
- php errordocsPHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier...CVE-2006-6545Public exploit7.5 High
- php animated smiley generator** DISPUTED ** PHP remote file inclusion vulnerability in signer/final.php in warez...CVE-2006-6541Disputed7.5 High
- phpPHP 5.2.0 and 4.4 allows local users to bypass safe_mode and open_basedir restrictions via a...CVE-2006-6383Public exploit4.6 Medium
- phpUnspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass...CVE-2006-57067.2 High
- phpBuffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted...CVE-2006-5465Fix availableEPSS 10.3%7.5 High
- phpInteger overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute...CVE-2006-4812Public exploitFix availableEPSS 20.7%10.0 High
- phpRace condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the...CVE-2006-5178Public exploit6.2 Medium
- phpPHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server...CVE-2006-4625Public exploit3.6 Low
- phpInteger overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit...CVE-2006-44862.6 Low
- phpThe stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out...CVE-2006-448510.0 High
- phpBuffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in...CVE-2006-4484Fix available2.6 Low
- phpThe cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5...CVE-2006-44839.3 High
- php, canonical ubuntu linux, debian linux +2 moreMultiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext...CVE-2006-44829.3 High
- phpThe (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the...CVE-2006-44817.2 High
- phpPHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier ...CVE-2006-44337.5 High
- phpThe ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and...CVE-2006-40235.0 Medium
- phpscanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to...CVE-2006-4020Public exploit4.6 Medium
- phpThe error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local...CVE-2006-3011Public exploit4.6 Medium
- phpzend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause...CVE-2006-30179.3 High
- Show moreLoading…