Skip to content
Php Group Php vulnerabilities
-
php
Integer overflow in the firebird and dblib quoters causing OOB writes
CVE-2024-11236
Fix available
9.8 Critical
-
php
Configuring a proxy in a stream context might allow for CRLF injection in URIs
CVE-2024-11234
Fix available
4.8 Medium
-
php
Single byte overread with convert.quoted-printable-decode filter
CVE-2024-11233
Fix available
4.8 Medium
-
php
Leak partial content of the heap through heap buffer over-read in mysqlnd
CVE-2024-8929
Fix available
5.8 Medium
-
php, netapp ontap +1 more
OOB access in ldap_escape
CVE-2024-8932
Fix available
9.8 Critical
-
php, fedoraproject fedora +1 more
Argument Injection in PHP-CGI
CVE-2024-4577
In KEVPublic exploitFix available
EPSS 100.0%
9.8 Critical
-
php, debian linux +1 more
PHP function password_verify can erroneously return true when argument contains NUL
CVE-2024-3096
Fix available
6.5 Medium
-
php, fedoraproject fedora +1 more
Command injection via array-ish $command parameter of proc_open()
CVE-2024-1874
Public exploitFix available
EPSS 32.8%
9.4 Critical
-
php
PHP mb_encode_mimeheader runs endlessly for some inputs
CVE-2024-2757
Fix available
7.5 High
-
php group php
The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent...
CVE-2006-7205
5.0 Medium
-
php group php
Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown...
CVE-2006-3018
7.5 High
-
php group php
Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors,...
CVE-2006-3016
Fix available
9.3 High