PH
Language
PHP
On CISA KEVExploited in the wildRansomware-linked
748
CVEs
6
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 133High 129Medium 67Low 4
Watch
Add PHP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-0708 | – | Mar 20 | exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via… Affected: through 5.3.5; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-0421 | – | Mar 20 | The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow… Affected: through 5.3.5; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-1148 | – | Mar 18 | Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or… Affected: through 5.3.6; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-1153 | – | Mar 16 | Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from… Affected: through 5.3.5; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-1092 | – | Mar 15 | Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large… Affected: through 5.3.5; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-0420 | – | Feb 18 | The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an… Affected: 5.3.5 |
| CVE-2011-0755 | – | Feb 2 | Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a… Affected: through 5.3.3; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-0754 | – | Feb 2 | The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier… Affected: through 5.3.3; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-0753 | – | Feb 2 | Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service (memory… Affected: through 5.3.3; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-0752 | – | Feb 2 | The extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal array and (2) the this variable, which… Affected: through 5.2.14; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2010-4700 | – | Jan 18 | The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqli_fetch_assoc function, which… Affected: 5.3.2; 5.3.3 |
| CVE-2010-4699 | – | Jan 18 | The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings that are unrecognized by the iconv and mbstring (aka Multibyte… Affected: through 5.3.3; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2010-4698 | – | Jan 18 | Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.10; +8 more |
| CVE-2010-4697 | – | Jan 18 | Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory… Affected: through 5.2.14; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2006-7243 | – | Jan 18 | PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension… Affected: through 5.3.3; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2010-4645 | – | Jan 11 | strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +16 more |
| CVE-2010-4150 | – | Dec 7 | Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.10; +8 more |
| CVE-2010-4409 | – | Dec 6 | Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service… Affected: through 5.3.3; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2009-5016 | – | Nov 12 | Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection… Affected: through 5.2.10; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2010-3870 | – | Nov 12 | The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote… Affected: before 5.2.14; 5.3.0 before 5.3.4 |
| CVE-2010-3709 | – | Nov 8 | The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer… Affected: 5.2.0 before 5.2.15; 5.3.0 before 5.3.4 |
| CVE-2010-3436 | – | Nov 8 | fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename Affected: 5.2.0 before 5.2.15; 5.3.0 before 5.3.4 |
| CVE-2010-3710 | – | Oct 25 | Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +13 more |
| CVE-2010-2950 | – | Sep 28 | Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and… Affected: 5.3.0; 5.3.1; 5.3.2; 5.3.3 |
| CVE-2010-2531 | – | Aug 20 | The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which… Affected: 5.2.0 before 5.2.14; 5.3.0 before 5.3.3 |
| CVE-2010-2484 | – | Aug 20 | The strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +7 more |
| CVE-2010-3065 | – | Aug 20 | The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which allows context-dependent attackers to… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +11 more |
| CVE-2010-3064 | – | Aug 20 | Stack-based buffer overflow in the php_mysqlnd_auth_write function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of… Affected: 5.3.0; 5.3.1; 5.3.2 |
| CVE-2010-3063 | – | Aug 20 | The php_mysqlnd_read_error_from_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length, which allows context-dependent… Affected: 5.3.0; 5.3.1; 5.3.2 |
| CVE-2010-3062 | – | Aug 20 | mysqlnd_wireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers to (1) read sensitive memory via a modified length value, which is not properly… Affected: 5.3.0; 5.3.1; 5.3.2 |
| CVE-2010-2225 | – | Jun 24 | Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +11 more |
| CVE-2010-2191 | – | Jun 8 | The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) ZEND_ASSIGN_CONCAT opcodes; and the (8) ArrayObject::uasort… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +11 more |
| CVE-2010-2190 | – | Jun 8 | The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +11 more |
| CVE-2010-2101 | – | May 27 | The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +11 more |
| CVE-2010-2100 | – | May 27 | The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +11 more |
| CVE-2010-2097 | – | May 27 | The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +11 more |
| CVE-2010-2094 | – | May 27 | Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and… Affected: 5.3.0; 5.3.1 |
| CVE-2010-2093 | – | May 27 | Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +9 more |
| CVE-2010-1917 | – | May 12 | Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (PHP crash) via a crafted first… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +10 more |
| CVE-2010-1915 | – | May 12 | The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +10 more |
| CVE-2010-1914 | – | May 12 | The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the (1)… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +10 more |
| CVE-2010-1868 | – | May 7 | The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +10 more |
| CVE-2010-1864 | – | May 7 | The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +10 more |
| CVE-2010-1862 | – | May 7 | The chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +10 more |
| CVE-2010-1861 | – | May 7 | The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's __sleep… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +10 more |
| CVE-2010-1860 | – | May 7 | The html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +10 more |
| CVE-2010-1130 | – | Mar 26 | session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to the session_save_path function, which… Affected: through 5.2.12; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +29 more |
| CVE-2010-1129 | – | Mar 26 | The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers… Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +7 more |
| CVE-2010-1128 | – | Mar 26 | The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were… Affected: through 5.2.12; 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; +7 more |
| CVE-2010-0397 | – | Mar 16 | The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent… Affected: 5.3.1 |
The 500 most important CVEs for this product (exploited first, then by severity)