Skip to contentPhp vulnerabilities
Newest
- phpThe php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers...CVE-2016-6288Fix available9.8 Critical
- phpphp_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8...CVE-2016-5773Fix available9.8 Critical
- php, debian linux, opensuse leap +4 more +6 moreDouble free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension...CVE-2016-5772Fix available9.8 Critical
- php, debian linux, opensuse leap +1 more +3 morespl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly...CVE-2016-5771Fix availableEPSS 15.5%9.8 Critical
- phpMultiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before...CVE-2016-5769Fix available9.8 Critical
- phpDouble free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the...CVE-2016-5768Fix available9.8 Critical
- phpThe sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x...CVE-2015-8935Fix available6.1 Medium
- phpsapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2...CVE-2016-5114Fix available9.1 Critical
- phpInteger overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x...CVE-2016-5096Fix available8.6 High
- phpInteger overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before...CVE-2016-5095Fix available8.6 High
- phpInteger overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36...CVE-2016-5094Fix available8.6 High
- phpThe get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6...CVE-2016-5093Fix available8.6 High
- php, opensuse leap, opensuse +2 moreInteger overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows...CVE-2016-43469.8 Critical
- phpInteger overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP...CVE-2016-43459.8 Critical
- phpInteger overflow in the xml_utf8_encode function in ext/xml/xml.c in PHP before 7.0.4 allows...CVE-2016-43449.8 Critical
- phpDouble free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers...CVE-2015-88809.8 Critical
- phpThe odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior...CVE-2015-88797.5 High
- phpmain/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure...CVE-2015-88785.9 Medium
- libgd, php +1 moreThe gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd)...CVE-2015-8877Fix available7.5 High
- phpZend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does...CVE-2015-8876Fix available9.8 Critical
- phpfile before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers...CVE-2014-0236Fix available7.5 High
- php, opensuse leap +1 moreStack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a...CVE-2015-8874Fix available7.5 High
- php, opensuse leap +1 moreStack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5...CVE-2015-8873Fix available7.5 High
- php, opensuse leap +1 moreUse-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP...CVE-2015-4116Fix available9.8 Critical
- php, canonical ubuntu linux +1 moreThe openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x...CVE-2015-8867Fix available7.5 High
- php, canonical ubuntu linux, opensuse leap +3 more +5 moreext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not...CVE-2015-8866Fix available9.6 Critical
- php, debian linux, fedoraproject fedora +2 more +4 moreThe exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6...CVE-2016-4544Fix available9.8 Critical
- php, fedoraproject fedora, hp system management homepage +1 more +3 moreThe exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6...CVE-2016-4543Fix availableEPSS 11.9%9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21,...CVE-2016-4542Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...CVE-2016-4541Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...CVE-2016-4540Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21,...CVE-2016-4539Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...CVE-2016-4538Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...CVE-2016-4537Fix available9.8 Critical
- phpDouble free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c...CVE-2016-3132Fix availableEPSS 11.7%9.8 Critical
- php, opensuse +1 moreThe phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0...CVE-2016-4343Fix available8.8 High
- php, opensuse leap +1 moreext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles...CVE-2016-4342Fix available8.8 High
- phpMultiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote...CVE-2016-3078Public exploitFix availableEPSS 56.1%9.8 Critical
- php, apple mac os x +1 moreMultiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in...CVE-2016-4073Fix available9.8 Critical
- php, apple mac os x +1 moreThe Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote...CVE-2016-4072Fix available9.8 Critical
- php, apple mac os x +1 moreFormat string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5...CVE-2016-4071Public exploitFix availableEPSS 20.5%9.8 Critical
- php** DISPUTED ** Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP...CVE-2016-4070Fix availableDisputed7.5 High
- libgd, canonical ubuntu linux, debian linux +3 more +5 moreInteger signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote...CVE-2016-3074Public exploitFix availableEPSS 35.7%9.8 Critical
- php, apple mac os x +1 moreThe phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x...CVE-2016-3142Fix available8.2 High
- php, apple mac os x +1 moreUse-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x...CVE-2016-3141Public exploitFix availableEPSS 36.0%9.8 Critical
- phpThe make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5...CVE-2016-3185Fix available7.1 High
- phpStack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x...CVE-2016-2554Fix availableEPSS 11.0%9.8 Critical
- phpMultiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers...CVE-2016-19047.3 High
- phpFormat string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP...CVE-2015-8617Public exploitEPSS 22.8%9.8 Critical
- phpUse-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator...CVE-2015-86168.6 High
- Show moreLoading…