Skip to contentPhp vulnerabilities
Newest
- php, redhat enterprise linux +1 moreThe php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before...CVE-2015-4644Fix available7.5 High
- php, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before...CVE-2015-4643Fix availableEPSS 15.4%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x...CVE-2015-4603Fix availableEPSS 10.6%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5...CVE-2015-4602Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 morePHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or...CVE-2015-4601Fix available9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8...CVE-2015-4600Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,...CVE-2015-4599Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...CVE-2015-4598Fix available6.5 Medium
- php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...CVE-2015-4148Public exploitFix availableEPSS 19.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...CVE-2015-4026Fix availableEPSS 18.8%7.5 High
- php, apple mac os x, hp system management homepage +9 more +11 moreAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...CVE-2015-4024Fix availableEPSS 41.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...CVE-2015-4022Fix availableEPSS 20.1%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...CVE-2015-4021Fix availableEPSS 20.5%5.0 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3412Fix available5.3 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3411Fix available6.5 Medium
- php, apple mac os x, oracle linux +8 more +10 moreMultiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP...CVE-2015-3329Fix availableEPSS 38.2%7.5 High
- php, apple mac os x, opensuse +6 more +8 moreUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...CVE-2015-2787Fix availableEPSS 11.8%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote...CVE-2015-2783Fix available5.8 Medium
- php, apple mac os x, canonical ubuntu linux +8 more +10 moreUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...CVE-2015-2301Fix availableEPSS 14.7%7.5 High
- phpThe exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21,...CVE-2015-0232Fix availableEPSS 15.6%6.8 Medium
- phpUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...CVE-2015-0231Public exploitFix availableEPSS 44.4%7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreThe GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5...CVE-2014-9709Fix availableEPSS 15.4%5.0 Medium
- phpHeap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c...CVE-2014-9705Fix availableEPSS 19.2%7.5 High
- file project file, php +1 moreThe mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in...CVE-2014-9652Fix available5.0 Medium
- phpUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...CVE-2014-8142Public exploitFix availableEPSS 55.1%7.5 High
- phpThe exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x...CVE-2014-3670Fix availableEPSS 22.6%6.8 Medium
- phpInteger overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5...CVE-2014-3669Fix availableEPSS 28.9%7.5 High
- phpBuffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc...CVE-2014-3668Fix availableEPSS 27.0%5.0 Medium
- php, suse linux enterprise server +1 moreThe default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in...CVE-2013-65014.6 Medium
- php, canonical ubuntu linux, debian linux +2 moreThe donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5...CVE-2014-3710Fix availableEPSS 14.0%5.0 Medium
- php, opensuse evergreen, opensuse +1 more +3 moreThe PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to...CVE-2014-54593.6 Low
- phpgd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure...CVE-2014-5120EPSS 16.9%6.4 Medium
- phpMultiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32...CVE-2014-3597Fix availableEPSS 15.4%6.8 Medium
- christos zoulas file, php +1 moreInteger overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in...CVE-2014-3587Fix availableEPSS 20.2%4.3 Medium
- php, debian linux +1 moreThe SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that...CVE-2014-3515Fix availableEPSS 30.1%7.5 High
- christos zoulas file, php, debian linux +1 more +3 moreThe cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo...CVE-2014-0207Fix availableEPSS 16.9%4.3 Medium
- php, debian linux +1 moreThe phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14...CVE-2014-4721Fix available2.6 Low
- file project file, php, debian linux +1 more +3 moreThe cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP...CVE-2014-3487Fix availableEPSS 14.9%4.3 Medium
- file project file, php, debian linux +1 more +3 moreThe cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in...CVE-2014-3480Fix availableEPSS 11.5%4.3 Medium
- file project file, php, debian linux +1 more +3 moreThe cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo...CVE-2014-3479Fix availableEPSS 14.9%4.3 Medium
- christos zoulas file, php +1 moreBuffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the...CVE-2014-3478Fix availableEPSS 15.2%5.0 Medium
- phpUse-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14...CVE-2014-4698Fix available4.6 Medium
- phpUse-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14...CVE-2014-4670Fix available4.6 Medium
- christos zoulas file, debian linux, php +2 morefile before 5.19 does not properly restrict the amount of data read during a regex search, which...CVE-2014-3538Fix availableEPSS 11.8%5.0 Medium
- php, debian linux, opensuse +2 moreHeap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4...CVE-2014-4049Fix availableEPSS 10.9%5.1 Medium
- phpacinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to...CVE-2014-39813.3 Low
- php, debian linux +1 moreThe cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5...CVE-2014-0238Fix availableEPSS 18.8%5.0 Medium
- php, debian linux +1 moreThe cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and...CVE-2014-0237Fix availableEPSS 18.0%5.0 Medium
- rxspencer project rxspencer, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka...CVE-2015-2305Fix available6.8 Medium
- phpsapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x...CVE-2014-0185Fix available7.2 High
- Show moreLoading…