Skip to contentPhp vulnerabilities
Newest
- phpThe php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before...CVE-2016-10162Fix available7.5 High
- phpThe object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before...CVE-2016-10161Fix availableEPSS 13.3%7.5 High
- php, debian linux, netapp clustered data ontap +2 moreOff-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...CVE-2016-10160Fix available9.8 Critical
- php, debian linux +1 moreInteger overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...CVE-2016-10159Fix available7.5 High
- phpThe exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15...CVE-2016-10158Fix available7.5 High
- php pecl httpBuffer overflow in the HTTP URL parsing functions in pecl_http before 3.0.1 might allow remote...CVE-2016-5873Fix available9.8 Critical
- php, netapp clustered data ontap +1 moreThe SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12...CVE-2016-7480EPSS 41.6%9.8 Critical
- php, netapp clustered data ontap +1 moreZend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that...CVE-2017-5340Fix availableEPSS 16.7%9.8 Critical
- phpIn all versions of PHP 7, during the unserialization process, resizing the 'properties' hash...CVE-2016-7479Fix availableEPSS 41.7%9.8 Critical
- phpThe unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote...CVE-2016-9936Fix available9.8 Critical
- phpThe get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29,...CVE-2014-9912Fix available9.8 Critical
- php phpmailer, joomla joomla\!, wordpress +2 moreRemote code execution in PHPMailerCVE-2016-10033In KEVPublic exploitFix availableEPSS 99.7%9.8 Critical
- phpThe php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14...CVE-2016-9935Fix available9.8 Critical
- phpext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a...CVE-2016-9934Fix available7.5 High
- phpPHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup...CVE-2016-91389.8 Critical
- phpZend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote...CVE-2016-7478Fix availableEPSS 42.4%7.5 High
- phpUse-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before...CVE-2016-9137Fix available9.8 Critical
- libgd, php, debian linux +2 moreInteger overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka...CVE-2016-7568Fix available9.8 Critical
- php, suse linux enterprise module for web scripting, linux enterprise software development kit +2 more/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code....CVE-2016-44739.8 Critical
- phpThe php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11...CVE-2016-7418Fix availableEPSS 11.4%7.5 High
- phpext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray...CVE-2016-7417Fix available9.8 Critical
- phpext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not...CVE-2016-7416Fix available7.5 High
- phpThe ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure...CVE-2016-7414Fix available9.8 Critical
- phpUse-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before...CVE-2016-7413Fix available9.8 Critical
- phpext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify...CVE-2016-7412Fix available8.1 High
- phpext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures,...CVE-2016-7411Fix available9.8 Critical
- phpThe imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10...CVE-2016-71269.8 Critical
- phpext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow,...CVE-2016-7134Fix available9.8 Critical
- phpZend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc...CVE-2016-7133Fix available8.1 High
- phpext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a...CVE-2016-7132Fix available7.5 High
- phpext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a...CVE-2016-7131Fix available7.5 High
- phpThe php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10...CVE-2016-7130Fix available7.5 High
- phpThe php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10...CVE-2016-7129Fix available9.8 Critical
- phpThe exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0...CVE-2016-7128Fix available5.3 Medium
- phpThe imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not...CVE-2016-7127Fix available9.8 Critical
- phpext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a...CVE-2016-7125Fix available7.5 High
- phpext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain...CVE-2016-7124Fix availableEPSS 16.5%9.8 Critical
- phpInteger overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5...CVE-2016-6297Fix available8.8 High
- phpInteger signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi...CVE-2016-6296Fix available9.8 Critical
- phpext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly...CVE-2016-6295Fix available9.8 Critical
- phpThe locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5...CVE-2016-6294Fix available9.8 Critical
- phpThe exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6...CVE-2016-6292Fix available6.5 Medium
- phpThe exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before...CVE-2016-6291Fix available9.8 Critical
- phpext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not...CVE-2016-6290Fix available9.8 Critical
- phpInteger overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38,...CVE-2016-6289Fix available7.8 High
- phpThe bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7...CVE-2016-5399Public exploitFix available7.8 High
- libgd, debian linux, opensuse leap +1 more +3 moreInteger overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics...CVE-2016-6207Fix available6.5 Medium
- php, debian linux, drupal +9 more +11 moreHTTP Proxy header vulnerabilityCVE-2016-5385Fix availableEPSS 50.4%8.1 High
- invisioncommunity invision power board, php +1 moreapplications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite...CVE-2016-6174Public exploitEPSS 12.3%8.1 High
- php, debian linux, opensuse leap +1 more +3 moreInteger overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in...CVE-2016-57709.8 Critical
- Show moreLoading…