Skip to contentPhp vulnerabilities
Newest
- php, canonical ubuntu linux, debian linux +9 more +11 moreThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...CVE-2014-2497Fix availableEPSS 20.3%4.3 Medium
- php xhprofCross-site scripting (XSS) vulnerability in XHProf before 0.9.4 allows remote attackers to inject...CVE-2013-44334.3 Medium
- christos zoulas file, debian linux, php +2 moreThe BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...CVE-2013-7345Fix available5.0 Medium
- file project file, canonical ubuntu linux, debian linux +2 more +4 moresoftmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial...CVE-2014-2270Fix available4.3 Medium
- phpext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote...CVE-2014-20205.0 Medium
- phpMultiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before...CVE-2013-73285.8 Medium
- php, canonical ubuntu linux +1 moreThe gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values,...CVE-2013-73276.8 Medium
- phpInteger overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows...CVE-2013-72266.8 Medium
- fine free file project free file, canonical ubuntu linux, debian linux +1 more +3 moreFine Free file before 5.17 allows context-dependent attackers to cause a denial of service ...CVE-2014-1943Fix available5.0 Medium
- phpThe libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir...CVE-2012-11715.0 Medium
- php, apple mac os x, opensuse +2 moreThe asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4...CVE-2013-6420Public exploitFix availableEPSS 35.4%7.5 High
- php, apple mac os x, canonical ubuntu linux +2 more +4 moreThe scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly...CVE-2013-67125.0 Medium
- gnu glibc, apple mac os x, debian linux +14 more +16 moreHeap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...CVE-2015-0235Public exploitFix availableEPSS 94.6%10.0 High
- php, canonical ubuntu linux, redhat enterprise linux +2 moreThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...CVE-2013-4248Fix available4.3 Medium
- phpSession fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote...CVE-2011-47186.8 Medium
- phpext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote...CVE-2013-4113Fix available6.8 Medium
- phpThe mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16...CVE-2013-46364.3 Medium
- phpInteger overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before...CVE-2013-46355.0 Medium
- phpHeap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in...CVE-2013-21105.0 Medium
- php** DISPUTED ** The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly...CVE-2013-3735Disputed5.0 Medium
- php, apple mac os x, redhat enterprise linux +2 moreThe SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read...CVE-2013-18244.3 Medium
- phpThe SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read...CVE-2013-1643EPSS 10.1%5.0 Medium
- phpext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship...CVE-2013-16357.5 High
- phpThe openssl_encrypt function in ext/openssl/openssl.c in PHP 5.3.9 through 5.3.13 does not...CVE-2012-61135.0 Medium
- php** DISPUTED ** Untrusted search path vulnerability in the installation functionality in PHP 5.3...CVE-2012-5381Public exploitDisputed6.0 Medium
- php, canonical ubuntu linux, debian linux +2 moreThe sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly...CVE-2012-43884.3 Medium
- phpThe sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does...CVE-2011-1398Public exploitEPSS 10.2%4.3 Medium
- phppdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not...CVE-2012-3450Public exploitEPSS 11.2%2.6 Low
- phpThe SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir...CVE-2012-33655.0 Medium
- phpUnspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP...CVE-2012-2688Public exploitEPSS 10.5%10.0 High
- phpInteger overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before...CVE-2012-2386Public exploitFix availableEPSS 42.1%7.5 High
- freebsd, php, postgresql +1 more +3 moreThe crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP,...CVE-2012-2143Fix available4.3 Medium
- phpBuffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows...CVE-2012-2376Public exploitEPSS 19.8%10.0 High
- phpsapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...CVE-2012-2336Public exploitEPSS 52.1%5.0 Medium
- phpphp-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers...CVE-2012-2335EPSS 33.7%7.5 High
- phpBuffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before...CVE-2012-2329Public exploitEPSS 61.9%5.0 Medium
- phpsapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...CVE-2012-2311Public exploitEPSS 69.3%7.5 High
- php, apple mac os x, debian linux +14 more +16 moresapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ...CVE-2012-1823In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- phpThe file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...CVE-2012-11725.8 Medium
- phpMemory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a...CVE-2012-0789Public exploit5.0 Medium
- phpThe PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature...CVE-2012-0788Public exploit5.0 Medium
- phpPHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive...CVE-2012-08316.8 Medium
- phpThe php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to...CVE-2012-0830Public exploitFix availableEPSS 29.8%7.5 High
- phpPHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create...CVE-2012-00576.4 Medium
- phpThe tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service...CVE-2012-0781Public exploitEPSS 10.4%5.0 Medium
- phpPHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow...CVE-2011-4153Public exploitEPSS 11.8%5.0 Medium
- phpPHP before 5.3.9 computes hash values for form parameters without restricting the ability to...CVE-2011-4885Public exploitEPSS 83.4%5.0 Medium
- php, canonical ubuntu linux, debian linux +2 moreInteger overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4...CVE-2011-45666.4 Medium
- phpThe is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes...CVE-2011-33797.5 High
- phpBuffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to...CVE-2011-326810.0 High
- Show moreLoading…