PH
Language
PHP
On CISA KEVExploited in the wildRansomware-linked
750
CVEs
6
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 134High 130Medium 67Low 4
Watch
Add PHP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-3414 | – | Apr 24 | SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized… Affected: 5.4.0 before 5.4.42; 5.5.0 before 5.5.26; 5.6.0 before 5.6.10 |
| CVE-2015-2787 | – | Mar 30 | Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows… Affected: through 5.4.38; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +34 more |
| CVE-2015-2348 | – | Mar 30 | The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a… Affected: through 5.4.38; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +34 more |
| CVE-2015-2331 | – | Mar 30 | Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x… Affected: through 5.4.38; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +34 more |
| CVE-2015-2305 | – | Mar 30 | Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other… Affected: 5.4.0 before 5.4.39; 5.5.0 before 5.5.23; 5.6.0 before 5.6.7 |
| CVE-2015-2301 | – | Mar 30 | Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service… Affected: 5.4.0 before 5.4.40; 5.5.0 before 5.5.22; 5.6.0 before 5.6.6 |
| CVE-2015-1352 | – | Mar 30 | The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote… Affected: before 5.4.40; 5.5.0 before 5.5.24; 5.6.0 before 5.6.8 |
| CVE-2015-1351 | – | Mar 30 | Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of… Affected: before 5.5.24; 5.6.0 before 5.6.8 |
| CVE-2015-0273 | – | Mar 30 | Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code… Affected: through 5.4.37; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +34 more |
| CVE-2014-9709 | – | Mar 30 | The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer… Affected: 5.4.0 before 5.4.40; 5.5.0 before 5.5.21; 5.6.0 before 5.6.5 |
| CVE-2014-9705 | – | Mar 30 | Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote… Affected: through 5.4.37; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +34 more |
| CVE-2014-9653 | – | Mar 30 | readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes… Affected: through 5.4.36; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +34 more |
| CVE-2014-9652 | – | Mar 30 | The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly… Affected: through 5.4.36; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +34 more |
| CVE-2013-6501 | – | Mar 30 | The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local… Affected: through 5.6.7 |
| CVE-2015-0235 | – | Jan 28 | Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary… Affected: 5.4.0 before 5.4.38; 5.5.0 before 5.5.22; 5.6.0 before 5.6.6 |
| CVE-2015-0232 | – | Jan 27 | The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a… Affected: through 5.4.36; 5.4.0; 5.4.1; 5.4.2; 5.4.3; 5.4.4; +34 more |
| CVE-2015-0231 | – | Jan 27 | Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows… Affected: through 5.4.36; 5.4.0; 5.4.1; 5.4.2; 5.4.3; 5.4.4; +34 more |
| CVE-2014-9427 | – | Jan 3 | sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider… Affected: 1.0; 2.0; 2.0b10; 3.0; 3.0.1; 3.0.2; +34 more |
| CVE-2014-9425 | – | Dec 31 | Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers… Affected: through 5.5.20; 5.6.0 through 5.6.4 |
| CVE-2014-8142 | – | Dec 20 | Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows… Affected: through 5.4.35; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +34 more |
| CVE-2014-8626 | – | Nov 23 | Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service… Affected: through 5.2.6; 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; +1 more |
| CVE-2014-3710 | – | Nov 5 | The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows… Affected: 5.4.0 before 5.4.35; 5.5.0 before 5.5.19; 5.6.0 before 5.6.3 |
| CVE-2014-3670 | – | Oct 29 | The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly,… Affected: through 5.4.33; 5.4.0; 5.4.1; 5.4.2; 5.4.3; 5.4.4; +34 more |
| CVE-2014-3669 | – | Oct 29 | Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to… Affected: through 5.4.33; 5.4.0; 5.4.1; 5.4.2; 5.4.3; 5.4.4; +34 more |
| CVE-2014-3668 | – | Oct 29 | Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x… Affected: through 5.4.33; 5.4.0; 5.4.1; 5.4.2; 5.4.3; 5.4.4; +34 more |
| CVE-2014-5459 | – | Sep 27 | The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file… Affected: through 5.6.0 |
| CVE-2014-5120 | – | Aug 23 | gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite… Affected: 5.4.0; 5.4.0; 5.4.0; 5.4.0; 5.4.1; 5.4.2; +34 more |
| CVE-2014-3597 | – | Aug 23 | Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service… Affected: through 5.4.31; 5.4.0; 5.4.0; 5.4.0; 5.4.0; 5.4.1; +34 more |
| CVE-2014-3587 | – | Aug 23 | Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows… Affected: through 5.4.31; 5.4.0; 5.4.0; 5.4.0; 5.4.0; 5.4.1; +34 more |
| CVE-2014-4698 | – | Jul 10 | Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have… Affected: 5.4.0 before 5.4.32; 5.5.0 before 5.5.15 |
| CVE-2014-4670 | – | Jul 10 | Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have… Affected: through 5.5.14; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +21 more |
| CVE-2014-3515 | – | Jul 9 | The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which… Affected: before 5.3.29; 5.4.0 before 5.4.30; 5.5.0 before 5.5.14 |
| CVE-2014-3487 | – | Jul 9 | The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream… Affected: before 5.3.29; 5.4.0 before 5.4.30; 5.5.0 before 5.5.14 |
| CVE-2014-3479 | – | Jul 9 | The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size… Affected: before 5.3.29; 5.4.0 before 5.4.30; 5.5.0 before 5.5.14 |
| CVE-2014-4721 | – | Jul 6 | The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE,… Affected: 5.3.0 before 5.3.29; 5.4.0 before 5.4.30; 5.5.0 before 5.5.14 |
| CVE-2014-3538 | – | Jul 3 | file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a… Affected: 5.4.0 before 5.4.32; 5.5.0 before 5.5.16 |
| CVE-2014-4049 | – | Jun 18 | Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly… Affected: 5.3.0 before 5.3.29; 5.4.0 before 5.4.30; 5.5.0 before 5.5.14; 5.6.0; 5.6.0; 5.6.0; +5 more |
| CVE-2014-3981 | – | Jun 8 | acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file Affected: before 5.3.29; 5.4.0 before 5.4.30; 5.5.0 before 5.5.14 |
| CVE-2014-0238 | – | Jun 1 | The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite… Affected: before 5.3.29; 5.4.0 before 5.4.29; 5.5.0 before 5.5.13 |
| CVE-2014-0237 | – | Jun 1 | The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service… Affected: before 5.3.29; 5.4.0 before 5.4.29; 5.5.0 before 5.5.13 |
| CVE-2014-0185 | – | May 6 | sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to… Affected: 5.3.0 before 5.3.28; 5.4.0 before 5.4.28; 5.5.0 before 5.5.12 |
| CVE-2013-7345 | – | Mar 24 | The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows… Affected: 5.4.0 before 5.4.27; 5.5.0 before 5.5.11 |
| CVE-2014-2497 | – | Mar 21 | The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: before 5.4.32; 5.5.0 before 5.5.16 |
| CVE-2014-2270 | – | Mar 14 | softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the… Affected: before 5.4.26; 5.5.0 before 5.5.10 |
| CVE-2014-1943 | – | Feb 18 | Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in… Affected: 5.4.0 before 5.4.26; 5.5.0 before 5.5.10 |
| CVE-2014-2020 | – | Feb 18 | ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by using a (1) string or (2) array data type in… Affected: through 5.5.8; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +14 more |
| CVE-2013-7328 | – | Feb 18 | Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service (application crash) or… Affected: 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +15 more |
| CVE-2013-7327 | – | Feb 18 | The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or… Affected: through 5.5.8; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +14 more |
| CVE-2013-7226 | – | Feb 18 | Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have… Affected: 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; 5.5.0; +14 more |
| CVE-2012-1171 | – | Feb 15 | The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close… Affected: 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)