Skip to contentPhp vulnerabilities
Newest
- php, debian linux, tenable tenable.sc +2 moreUse of freed hash key in the phar_parse_zipfile functionCVE-2020-7068Fix available4.8 Medium
- phpTemporary files are not cleaned after OOM when parsing HTTP request dataCVE-2019-11048Fix available5.3 Medium
- php, debian linux, oracle communications diameter signaling router +1 more +3 moreOOB Read in urldecode()CVE-2020-7067Fix available7.5 High
- php, debian linux, opensuse leap +1 more +3 moreget_headers() silently truncates after a null byteCVE-2020-7066Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moremb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_fullCVE-2020-7065Fix available7.4 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreUse-of-uninitialized-value in exifCVE-2020-7064Fix available6.5 Medium
- php, debian linux, opensuse leap +1 more +3 moreFiles added to tar with Phar::buildFromIterator have all-access permissionsCVE-2020-7063Fix available5.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreNull Pointer Dereference in PHP Session Upload ProgressCVE-2020-7062Fix available7.5 High
- php, tenable tenable.sc +1 moreheap-buffer-overflow in phar_extract_fileCVE-2020-7061Fix available6.5 Medium
- phpUse-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6...CVE-2014-36229.8 Critical
- apple mac os x, macos, freebsd +2 more +4 moreregcomp in the BSD implementation of libc is vulnerable to denial of service due to stack...CVE-2011-3336Public exploit7.5 High
- php, debian linux, opensuse leap +2 more +4 moreglobal buffer-overflow in mbfl_filt_conv_big5_wcharCVE-2020-7060Fix available6.5 Medium
- php, debian linux, opensuse leap +2 more +4 moreOOB read in php_strip_tags_exCVE-2020-7059Fix available6.5 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free in exif parsing under memory sanitizerCVE-2019-11050Fix available4.8 Medium
- php, debian linux, fedoraproject fedora +1 more +3 moremail() may release string with refcount==1 twiceCVE-2019-110496.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreHeap-buffer-overflow READ in exifCVE-2019-11047Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreBuffer underflow in bc_shift_addsubCVE-2019-11046Fix available3.7 Low
- php, canonical ubuntu linux, debian linux +3 more +5 moreDirectoryIterator class silently truncates after a null byteCVE-2019-11045Fix available3.7 Low
- php, fedoraproject fedora, tenable security center +2 morelink() silently truncates after a null byte on WindowsCVE-2019-110443.7 Low
- php, zend framework, zendframework +1 more +3 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2011-1939Public exploitFix available9.8 Critical
- oniguruma project oniguruma, php, canonical ubuntu linux +2 more +4 moreOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...CVE-2019-19246Fix available7.5 High
- php, php5, debian linux +1 more +3 morePHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which...CVE-2010-46577.5 High
- php, canonical ubuntu linux, debian linux +21 more +23 moreUnderflow in PHP-FPM can lead to RCECVE-2019-11043In KEVPublic exploitFix availableEPSS 99.8%8.7 High
- php ext-httpA type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl...CVE-2016-7398Fix available9.8 Critical
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_process_user_comment in EXIF extensionCVE-2019-11042Fix available4.8 Medium
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_scan_thumbnail in EXIF extensionCVE-2019-11041Fix available4.8 Medium
- phpmain/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by...CVE-2017-71897.5 High
- oniguruma project oniguruma, php, canonical ubuntu linux +2 more +4 moreA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...CVE-2019-13224Fix available9.8 Critical
- libgd, php, canonical ubuntu linux +10 more +12 moreUninitialized read in gdImageCreateFromXbmCVE-2019-11038Fix available3.1 Low
- php, debian linux, opensuse leap +1 more +3 moreHeap buffer overflow in EXIF extensionCVE-2019-11040Fix available4.8 Medium
- php, debian linux, opensuse leap +1 more +3 moreOut-of-bounds read in iconv.cCVE-2019-11039Fix available4.2 Medium
- php imagick, php group imagick extension +1 moreOut of bounds memory write in PHP Imagick extensionCVE-2019-11037Fix available4.9 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11036Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11035Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11034Fix available4.8 Medium
- php, canonical ubuntu linux, opensuse leap +2 more** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3....CVE-2019-9675Fix availableDisputed8.1 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9641Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9640Fix available7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9639Fix available7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9638Fix available7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...CVE-2019-9637Fix available7.5 High
- php, netapp storage automation store +1 moreAn issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an...CVE-2019-90259.8 Critical
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2....CVE-2019-9022Fix available7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...CVE-2019-9024Fix available7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...CVE-2019-9023Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...CVE-2019-9021Fix availableEPSS 10.1%9.8 Critical
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...CVE-2019-9020Fix availableEPSS 10.1%9.8 Critical
- libgd, php, canonical ubuntu linux +2 more +4 moregdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in...CVE-2019-6977Public exploitFix availableEPSS 71.5%8.8 High
- canonical ubuntu linux, debian linux, php pear archive tar +2 moreArchive_Tar contains Potential RCE if filename starts with phar://CVE-2018-1000888Public exploitFix availableEPSS 19.1%8.8 High
- php, opensuse leap +1 moreIn PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer...CVE-2018-20783Fix available7.5 High
- Show moreLoading…