Skip to contentPhp vulnerabilities
Newest
- phpPHP before 5.3.7 does not properly implement the error_log function, which allows context...CVE-2011-32675.0 Medium
- phpThe crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt...CVE-2011-31894.3 Medium
- phpPHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc...CVE-2011-3182Public exploitEPSS 19.2%5.0 Medium
- php, postgresql, openwall crypt blowfish +2 morecrypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8...CVE-2011-2483Fix available5.0 Medium
- phpThe (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP...CVE-2011-16575.0 Medium
- phpThe rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...CVE-2011-2202Public exploitEPSS 19.7%6.4 Medium
- phpStack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3...CVE-2011-1938Public exploitEPSS 23.1%7.5 High
- phpInteger signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context...CVE-2011-1471Public exploitEPSS 13.2%4.3 Medium
- phpThe Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of...CVE-2011-1470Public exploit4.3 Medium
- phpUnspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent...CVE-2011-14694.3 Medium
- phpMultiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers...CVE-2011-1468Public exploitEPSS 13.3%4.3 Medium
- phpUnspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in...CVE-2011-1467Public exploitEPSS 12.7%5.0 Medium
- phpInteger overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows...CVE-2011-14665.0 Medium
- phpBuffer overflow in the strval function in PHP before 5.3.6, when the precision configuration...CVE-2011-14644.3 Medium
- phpexif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...CVE-2011-0708Public exploit4.3 Medium
- phpThe _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does...CVE-2011-0421Public exploitFix availableEPSS 13.5%4.3 Medium
- phpThe Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete...CVE-2011-04416.3 Medium
- phpUse-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows...CVE-2011-11487.5 High
- phpMultiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and...CVE-2011-11537.5 High
- phpInteger overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to...CVE-2011-1092Public exploitEPSS 17.9%7.5 High
- php pearThe installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a...CVE-2011-11443.3 Low
- php pearThe installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink...CVE-2011-1072Fix available3.3 Low
- phpThe grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5...CVE-2011-0420Public exploitEPSS 14.4%5.0 Medium
- phpInteger overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context...CVE-2011-07555.0 Medium
- phpThe SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4...CVE-2011-07544.4 Medium
- phpRace condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler...CVE-2011-07534.3 Medium
- phpThe extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to...CVE-2011-07525.0 Medium
- phpThe set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used,...CVE-2010-47006.8 Medium
- phpThe iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not...CVE-2010-46995.0 Medium
- phpStack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4...CVE-2010-46985.0 Medium
- phpUse-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might...CVE-2010-46976.8 Medium
- phpPHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent...CVE-2006-72435.0 Medium
- phpstrtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and...CVE-2010-4645Public exploitEPSS 15.1%5.0 Medium
- phpDouble free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c...CVE-2010-41505.0 Medium
- phpInteger overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3...CVE-2010-4409Public exploitEPSS 18.9%5.0 Medium
- phpInteger overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it...CVE-2009-50166.8 Medium
- php, canonical ubuntu linux +1 moreThe utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...CVE-2010-3870Public exploitEPSS 11.3%6.8 Medium
- php, canonical ubuntu linux +1 moreThe ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3...CVE-2010-3709Public exploitEPSS 13.3%4.3 Medium
- php, canonical ubuntu linux +1 morefopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir...CVE-2010-34365.0 Medium
- phpStack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x...CVE-2010-37104.3 Medium
- phpFormat string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows...CVE-2010-29506.8 Medium
- php, debian linux +1 moreThe var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer...CVE-2010-25314.3 Medium
- phpThe strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain...CVE-2010-24845.0 Medium
- phpStack-based buffer overflow in the php_mysqlnd_auth_write function in the Mysqlnd extension in...CVE-2010-30646.8 Medium
- phpThe php_mysqlnd_read_error_from_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2...CVE-2010-30635.0 Medium
- phpmysqlnd_wireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers...CVE-2010-30625.0 Medium
- phpThe default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly...CVE-2010-30655.0 Medium
- phpUse-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through...CVE-2010-22257.5 High
- phpThe (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6)...CVE-2010-21916.4 Medium
- phpThe (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13...CVE-2010-21905.0 Medium
- Show moreLoading…