PH
Language
PHP
On CISA KEVExploited in the wildRansomware-linked
748
CVEs
6
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 133High 129Medium 67Low 4
Watch
Add PHP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4601 | 9.8 | May 16 | PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type… Affected: through 5.6.6 |
| CVE-2015-4600 | 9.8 | May 16 | The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or… Affected: through 5.4.39; 5.5.0; 5.5.1; 5.5.2; 5.5.3; 5.5.4; +27 more |
| CVE-2015-4599 | 9.8 | May 16 | The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information,… Affected: through 5.4.39; 5.5.0; 5.5.1; 5.5.2; 5.5.3; 5.5.4; +27 more |
| CVE-2015-4116 | 9.8 | May 16 | Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary… Affected: through 5.5.26; 5.6.0; 5.6.1; 5.6.2; 5.6.3; 5.6.4; +6 more |
| CVE-2016-3074 | 9.8 | Apr 26 | Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via… Affected: 5.5.0 before 5.5.35; 5.6.0 before 5.6.21; 7.0.0 before 7.0.6 |
| CVE-2016-3141 | 9.8 | Mar 31 | Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption… Affected: through 5.5.32; 5.6.0; 5.6.1; 5.6.2; 5.6.3; 5.6.4; +14 more |
| CVE-2015-8617 | 9.8 | Jan 19 | Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format… Affected: 7.0.1 |
| CVE-2016-1283 | 9.8 | Jan 3 | The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the… Affected: 5.6.0 before 5.6.32; 7.0.0 before 7.0.25; 7.1.0 before 7.1.11 |
| CVE-2015-8394 | 9.8 | Dec 2 | PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have… Affected: 5.5.0 before 5.5.32; 5.6.0 before 5.6.18; 7.0.0 before 7.0.3 |
| CVE-2015-8391 | 9.8 | Dec 2 | The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or… Affected: 5.5.0 before 5.5.32; 5.6.0 before 5.6.18; 7.0.0 before 7.0.3 |
| CVE-2015-8390 | 9.8 | Dec 2 | PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have… Affected: 5.5.0 before 5.5.32; 5.6.0 before 5.6.18; 7.0.0 before 7.0.3 |
| CVE-2015-8389 | 9.8 | Dec 2 | PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have… Affected: 5.5.0 before 5.5.32; 5.6.0 before 5.6.18; 7.0.0 before 7.0.3 |
| CVE-2015-8386 | 9.8 | Dec 2 | PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer… Affected: 5.5.0 before 5.5.32; 5.6.0 before 5.6.18; 7.0.0 before 7.0.3 |
| CVE-2015-8383 | 9.8 | Dec 2 | PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other… Affected: 5.5.0 before 5.5.32; 5.6.0 before 5.6.18; 7.0.0 before 7.0.3 |
| CVE-2010-1866 | 9.8 | May 7 | The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly… Affected: 5.3.0 through 5.3.2 |
| CVE-2008-2108 | 9.8 | May 7 | The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during… Affected: 4.0.0 before 4.4.8; 5.0.0 before 5.2.5 |
| CVE-2008-0599 | 9.8 | May 5 | The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which… Affected: before 5.2.6 |
| CVE-2007-1399 | 9.8 | Mar 10 | Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a… Affected: 5.2.0; 5.2.1 |
| CVE-2007-1383 | 9.8 | Mar 10 | Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowing this counter, which causes the same… Affected: 4.0 |
| CVE-2015-8866 | 9.6 | May 22 | ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads,… Affected: 5.5.0 before 5.5.22; 5.6.0 before 5.6.6; 7.0.0 before 7.0.27; 7.1.0 before 7.1.13; 7.2.0 before 7.2.1 |
| CVE-2024-1874 | 9.4 | Apr 29 | In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of… Affected: 8.1.0 before 8.1.28; 8.2.0 before 8.2.18; 8.3.0 before 8.3.5 |
| CVE-2026-6104 | 9.1 | May 10 | Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding Affected: 8.4.* before 8.4.21; 8.5.* before 8.5.6 |
| CVE-2022-31631 | 9.1 | Feb 12 | In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long… Affected: 8.0.0 before 8.0.27; 8.1.0 before 8.1.15; 8.2.0 before 8.2.2 |
| CVE-2020-7061 | 9.1 | Feb 27 | In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read… Affected: 7.2.0 through 7.2.27; 7.3.0 through 7.3.14; 7.4.0 through 7.4.2 |
| CVE-2020-7060 | 9.1 | Feb 10 | When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data… Affected: 7.2.0 before 7.2.27; 7.3.0 before 7.3.14; 7.4.0 before 7.4.2 |
| CVE-2020-7059 | 9.1 | Feb 10 | When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will… Affected: 7.2.0 before 7.2.27; 7.3.0 before 7.3.14; 7.4.0 before 7.4.2 |
| CVE-2019-11040 | 9.1 | Jun 19 | When PHP EXIF extension is parsing EXIF information from an image, e.g Affected: 7.1.0 before 7.1.30; 7.2.0 before 7.2.19; 7.3.0 before 7.3.6 |
| CVE-2019-11039 | 9.1 | Jun 19 | Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when… Affected: 7.1.0 before 7.1.30; 7.2.0 before 7.2.19; 7.3.0 before 7.3.6 |
| CVE-2019-11036 | 9.1 | May 3 | When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in… Affected: 7.1.0 before 7.1.29; 7.2.0 before 7.2.18; 7.3.0 before 7.3.5 |
| CVE-2019-11035 | 9.1 | Apr 18 | When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in… Affected: 7.1.0 before 7.1.28; 7.2.9 before 7.2.17; 7.3.0 before 7.3.4 |
| CVE-2019-11034 | 9.1 | Apr 18 | When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in… Affected: 7.1.0 before 7.1.28; 7.2.9 before 7.2.17; 7.3.0 before 7.3.4 |
| CVE-2017-11147 | 9.1 | Jul 10 | In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially… Affected: before 5.6.30; 7.0.0 before 7.0.15; 7.1.0 before 7.1.1 |
| CVE-2016-5114 | 9.1 | Aug 7 | sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain… Affected: through 5.5.30; 5.6.0; 5.6.0; 5.6.0; 5.6.0; 5.6.0; +22 more |
| CVE-2016-1903 | 9.1 | Jan 19 | The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain… Affected: through 5.5.30; 5.6.0; 5.6.0; 5.6.0; 5.6.0; 5.6.0; +22 more |
| CVE-2024-8926 | 8.8 | Oct 8 | In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for CVE-2024-4577… Affected: 8.1.0 before 8.1.30; 8.2.0 before 8.2.24; 8.3.0 before 8.3.12 |
| CVE-2024-5585 | 8.8 | Jun 9 | In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces Affected: 8.1.0 before 8.1.29; 8.2.0 before 8.2.20; 8.3.0 before 8.3.8 |
| CVE-2022-31626 | 8.8 | Jun 16 | In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to… Affected: 7.4.0 before 7.4.30; 8.0.0 before 8.0.20; 8.1.0 before 8.1.7 |
| CVE-2020-7065 | 8.8 | Apr 1 | In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite… Affected: 7.3.0 before 7.3.16; 7.4.0 before 7.4.4 |
| CVE-2019-6977 | 8.8 | Jan 27 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before… Affected: before 5.6.40; 7.0.0 before 7.1.26; 7.2.0 before 7.2.14; 7.3.0 |
| CVE-2018-19520 | 8.8 | Nov 25 | An issue was discovered in SDCMS 1.6 with PHP 5.x Affected: 5.0.0 through 5.6.38 |
| CVE-2018-10549 | 8.8 | Apr 29 | An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5 Affected: before 5.6.36; 7.0.0 before 7.0.30; 7.1.0 before 7.1.17; 7.2.0 before 7.2.5 |
| CVE-2016-6297 | 8.8 | Jul 25 | Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a… Affected: through 5.5.37; 5.6.0; 5.6.0; 5.6.0; 5.6.0; 5.6.0; +34 more |
| CVE-2016-4343 | 8.8 | May 22 | The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause… Affected: before 5.5.36; 5.6.0 before 5.6.18; 7.0.0 before 7.0.3 |
| CVE-2016-4342 | 8.8 | May 22 | ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of… Affected: through 5.5.31; 5.6.0; 5.6.1; 5.6.2; 5.6.3; 5.6.4; +16 more |
| CVE-2016-5096 | 8.6 | Aug 7 | Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have… Affected: through 5.5.35; 5.6.0; 5.6.0; 5.6.0; 5.6.0; 5.6.0; +25 more |
| CVE-2016-5095 | 8.6 | Aug 7 | Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of… Affected: through 5.5.35; 5.6.0; 5.6.0; 5.6.0; 5.6.0; 5.6.0; +25 more |
| CVE-2016-5094 | 8.6 | Aug 7 | Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or… Affected: through 5.5.36; 5.6.0; 5.6.0; 5.6.0; 5.6.0; 5.6.0; +25 more |
| CVE-2016-5093 | 8.6 | Aug 7 | The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0'… Affected: through 5.5.35; 5.6.0; 5.6.0; 5.6.0; 5.6.0; 5.6.0; +32 more |
| CVE-2015-8616 | 8.6 | Jan 19 | Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of… Affected: 7.0.0 |
| CVE-2025-14178 | 8.2 | Dec 27 | In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the… Affected: 8.1.0 before 8.1.34; 8.2.0 before 8.2.30; 8.3.0 before 8.3.29; 8.4.0 before 8.4.16; 8.5.0 before 8.5.1 |
The 500 most important CVEs for this product (exploited first, then by severity)