Skip to contentPhp vulnerabilities
Newest
- phpThe (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad...CVE-2010-21015.0 Medium
- phpThe (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk,...CVE-2010-21005.0 Medium
- phpThe (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2...CVE-2010-20975.0 Medium
- phpMultiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow...CVE-2010-2094Public exploitEPSS 12.7%6.8 Medium
- phpUse-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5...CVE-2010-20935.0 Medium
- phpStack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...CVE-2010-19175.0 Medium
- phpThe preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...CVE-2010-19155.0 Medium
- phpThe Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...CVE-2010-19145.0 Medium
- phpThe (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5...CVE-2010-18687.5 High
- php, opensuse, suse linux enterprise +2 moreThe dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream,...CVE-2010-1866Public exploit9.8 Critical
- phpThe addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...CVE-2010-18645.0 Medium
- phpThe chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...CVE-2010-18625.0 Medium
- phpThe sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...CVE-2010-18616.4 Medium
- phpThe html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...CVE-2010-18605.0 Medium
- phpsession.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ;...CVE-2010-1130Public exploit5.0 Medium
- phpThe safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames...CVE-2010-11297.5 High
- phpThe Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected...CVE-2010-1128Public exploit6.4 Medium
- phpThe xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the...CVE-2010-0397Public exploitFix availableEPSS 11.5%5.0 Medium
- phpThe unserialize function in PHP 5.3.0 and earlier allows context-dependent attackers to cause a...CVE-2009-44185.0 Medium
- phpPHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack...CVE-2009-414310.0 High
- phpThe htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8...CVE-2009-4142Public exploit4.3 Medium
- phpThe proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1...CVE-2009-4018Public exploitEPSS 11.3%7.5 High
- phpThe zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions...CVE-2009-2626Public exploit6.4 Medium
- php, apple mac os x, debian linux +2 morePHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created...CVE-2009-4017Public exploitEPSS 12.0%5.0 Medium
- phpThe posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows...CVE-2009-35586.8 Medium
- phpThe tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows...CVE-2009-35575.0 Medium
- php** DISPUTED ** main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the...CVE-2009-3559Disputed7.5 High
- libgd gd graphics library, php +1 moreThe _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics...CVE-2009-3546Fix availableEPSS 10.2%9.3 High
- phpThe popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when...CVE-2009-32945.0 Medium
- phpUnspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown...CVE-2009-32937.5 High
- phpUnspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...CVE-2009-32927.5 High
- phpThe php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform...CVE-2009-32917.5 High
- phpPHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain...CVE-2008-7002Public exploit7.2 High
- php, debian linux +1 moreThe exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to...CVE-2009-26874.3 Medium
- phpThe JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote...CVE-2009-1271Fix available5.0 Medium
- phpPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify...CVE-2009-0754Public exploit2.1 Low
- phpThe php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context...CVE-2009-12725.0 Medium
- phpThe dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a...CVE-2008-70686.4 Medium
- phpPHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and...CVE-2008-58447.5 High
- phpCross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors...CVE-2008-58142.6 Low
- phpArray index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent...CVE-2008-5498Public exploit5.0 Medium
- phpHeap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring...CVE-2008-555710.0 High
- phpDirectory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier...CVE-2008-56587.5 High
- phpPHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is...CVE-2008-5625Public exploit7.5 High
- phpPHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for...CVE-2008-56247.5 High
- phpThe (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong...CVE-2008-41075.1 Medium
- phpPHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote...CVE-2008-36605.0 Medium
- phpBuffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6...CVE-2008-36596.4 Medium
- phpBuffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5...CVE-2008-36587.5 High
- pcre, canonical ubuntu linux, debian linux +3 more +5 moreHeap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE)...CVE-2008-2371Fix available7.5 High
- Show moreLoading…