Skip to contentPhp vulnerabilities
Newest
- php, debian linux +1 moreext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of...CVE-2018-19935Fix available7.5 High
- php, sdcms +1 moreAn issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses...CVE-2018-195208.8 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreUniversity of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other...CVE-2018-19518Public exploitFix availableEPSS 96.1%7.5 High
- phpext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of...CVE-2018-193967.5 High
- phpext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of...CVE-2018-193957.5 High
- php, debian linux, netapp storage automation store +2 moreThe Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x...CVE-2018-17082Fix available6.1 Medium
- php, netapp storage automation store +1 moreAn issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7...CVE-2018-151327.5 High
- php, netapp storage automation store +1 moreAn issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1....CVE-2018-148847.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x...CVE-2018-14883Fix available7.5 High
- php, netapp storage automation store +1 morePHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and...CVE-2017-9120Fix available9.8 Critical
- php, netapp storage automation store +1 morePHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.CVE-2017-9118Fix available7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreexif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x...CVE-2018-14851Fix available5.5 Medium
- php, canonical ubuntu linux, netapp storage automation store +2 moreexif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a...CVE-2018-12882Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...CVE-2018-10549Fix available8.8 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...CVE-2018-10548Fix available7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1...CVE-2018-10547Fix available6.1 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...CVE-2018-10546Public exploitFix available7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x...CVE-2018-10545Fix available4.7 Medium
- php, canonical ubuntu linux, debian linux +2 moreIn PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there...CVE-2018-7584Public exploitFix availableEPSS 87.3%9.8 Critical
- phpAn issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20....CVE-2015-9253Fix available6.5 Medium
- php, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x...CVE-2018-5712Fix availableEPSS 79.9%6.1 Medium
- php, canonical ubuntu linux, debian linux +2 moregd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7...CVE-2018-5711Public exploitFix availableEPSS 13.2%5.5 Medium
- php, canonical ubuntu linux, debian linux +2 more +4 moreIn PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension...CVE-2017-16642Public exploitFix availableEPSS 26.4%7.5 High
- phpext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a...CVE-2017-129347.5 High
- phpext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to...CVE-2017-12932Fix available9.8 Critical
- phpThe finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x...CVE-2017-12933Fix available9.8 Critical
- phpThe GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka...CVE-2017-7890Fix available6.5 Medium
- phpIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in...CVE-2017-11628Fix available7.8 High
- phpIn PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not...CVE-2017-11362Fix available9.8 Critical
- phpIn PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a...CVE-2017-111427.5 High
- php, netapp clustered data ontap +1 moreIn PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers...CVE-2017-11147Fix available9.1 Critical
- phpIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's...CVE-2017-11145Fix available7.5 High
- phpIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM...CVE-2017-11144Fix available7.5 High
- phpIn PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be...CVE-2017-11143Fix available7.5 High
- phpIn PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the...CVE-2016-10397Fix available7.5 High
- oniguruma project oniguruma, php, ruby-lang ruby +2 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...CVE-2017-9225Fix available9.8 Critical
- oniguruma project oniguruma, php, ruby-lang ruby +2 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...CVE-2017-9229Fix available7.5 High
- oniguruma project oniguruma, php +1 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...CVE-2017-9228Fix available9.8 Critical
- oniguruma project oniguruma, php +1 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...CVE-2017-9227Fix available9.8 Critical
- oniguruma project oniguruma, php +1 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...CVE-2017-9226Fix available9.8 Critical
- oniguruma project oniguruma, php +1 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...CVE-2017-9224Fix available9.8 Critical
- php, netapp clustered data ontap, storage automation store +2 moreThe i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...CVE-2017-9119Fix available9.8 Critical
- modx revolution, php +1 moreMODX Revolution Directory Traversal VulnerabilityCVE-2017-9067Fix available7.0 High
- phpThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...CVE-2017-8923Fix available9.8 Critical
- php** DISPUTED ** The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1...CVE-2017-7963Disputed7.5 High
- php** DISPUTED ** The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers...CVE-2017-6441Disputed7.5 High
- phpPHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen...CVE-2017-7272Fix available7.4 High
- phpAn issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or...CVE-2015-8994Fix available7.5 High
- php, canonical ubuntu linux +1 moreIn PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of...CVE-2016-10712Fix available7.5 High
- php pearPEAR core file overwrite vulnerabilityCVE-2017-5630Public exploitEPSS 12.5%7.5 High
- Show moreLoading…