PH
Language
PHP
On CISA KEVExploited in the wildRansomware-linked
750
CVEs
6
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 134High 130Medium 67Low 4
Watch
Add PHP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-6420 | – | Dec 17 | The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter… Affected: 5.4.0; 5.4.1; 5.4.2; 5.4.3; 5.4.4; 5.4.5; +34 more |
| CVE-2013-6712 | – | Nov 28 | The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to… Affected: before 5.3.29; 5.4.0 before 5.4.24; 5.5.0 before 5.5.8 |
| CVE-2013-1824 | – | Sep 16 | The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in… Affected: before 5.3.22; 5.4.0 before 5.4.12 |
| CVE-2013-4248 | – | Aug 18 | The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the… Affected: through 5.4.17; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +34 more |
| CVE-2011-4718 | – | Aug 13 | Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID Affected: through 5.5.1; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +34 more |
| CVE-2013-4113 | – | Jul 13 | ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have… Affected: 5.3.0 before 5.3.27; 5.4.0 before 5.4.18 |
| CVE-2013-4636 | – | Jun 21 | The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference… Affected: 5.4.0; 5.4.1; 5.4.2; 5.4.3; 5.4.4; 5.4.5; +10 more |
| CVE-2013-4635 | – | Jun 21 | Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a… Affected: through 5.3.25; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2013-2110 | – | Jun 21 | Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a… Affected: through 5.3.25; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2013-1643 | – | Mar 6 | The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in… Affected: through 5.3.21; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2013-1635 | – | Mar 6 | ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which… Affected: through 5.3.21; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2012-6113 | – | Jan 19 | The openssl_encrypt function in ext/openssl/openssl.c in PHP 5.3.9 through 5.3.13 does not initialize a certain variable, which allows remote attackers to obtain sensitive… Affected: 5.3.9; 5.3.10; 5.3.11; 5.3.12; 5.3.13 |
| CVE-2012-5381 | – | Oct 11 | Untrusted search path vulnerability in the installation functionality in PHP 5.3.17, when installed in the top-level C:\ directory, might allow local users to gain privileges via… Affected: 5.3.17 |
| CVE-2012-4388 | – | Sep 7 | The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences (aka carriage return characters),… Affected: 5.3.0 before 5.3.11; 5.4.0 |
| CVE-2011-1398 | – | Aug 30 | The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage return characters), which allows remote… Affected: through 5.3.10; 5.3.0; 5.3.1; 5.3.2; 5.3.3; 5.3.4; +5 more |
| CVE-2012-3450 | – | Aug 6 | pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements,… Affected: through 5.3.13; 5.3.0; 5.3.1; 5.3.2; 5.3.3; 5.3.4; +12 more |
| CVE-2012-3365 | – | Jul 20 | The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors Affected: through 5.3.14; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2012-2688 | – | Jul 20 | Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack… Affected: through 5.3.14; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2012-2386 | – | Jul 7 | Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service… Affected: through 5.3.13; 5.4.0 before 5.4.4 |
| CVE-2012-2143 | – | Jul 5 | The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if… Affected: before 5.3.14; 5.4.0 before 5.4.4 |
| CVE-2012-1172 | – | May 24 | The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for… Affected: through 5.3.10; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +34 more |
| CVE-2012-2376 | – | May 21 | Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger… Affected: through 5.4.3; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2012-2336 | – | May 11 | sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign)… Affected: through 5.3.12; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2012-2335 | – | May 11 | php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code… Affected: 5.3.12; 5.4.2 |
| CVE-2012-2329 | – | May 11 | Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash)… Affected: 5.4.0; 5.4.1; 5.4.2 |
| CVE-2012-2311 | – | May 11 | sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence… Affected: through 5.3.12; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2012-0789 | – | Feb 14 | Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function… Affected: through 5.3.8; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +34 more |
| CVE-2012-0788 | – | Feb 14 | The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash)… Affected: through 5.3.8; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +34 more |
| CVE-2012-0831 | – | Feb 10 | PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote… Affected: through 5.3.10 |
| CVE-2012-0830 | – | Feb 6 | The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables,… Affected: 5.3.9 |
| CVE-2012-0057 | – | Feb 2 | PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output… Affected: through 5.3.8; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +34 more |
| CVE-2012-0781 | – | Jan 18 | The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an… Affected: 5.3.8 |
| CVE-2011-4153 | – | Jan 18 | PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 5.3.8 |
| CVE-2011-4885 | – | Dec 30 | PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial… Affected: through 5.3.8; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +34 more |
| CVE-2011-4566 | – | Nov 29 | Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of… Affected: 5.3.0 before 5.3.9; 5.4.0 |
| CVE-2011-3379 | – | Nov 3 | The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted… Affected: 5.3.7; 5.3.8 |
| CVE-2011-3268 | – | Aug 25 | Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than… Affected: through 5.3.6; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-3267 | – | Aug 25 | PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified… Affected: through 5.3.6; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-3189 | – | Aug 25 | The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass… Affected: 5.3.7 |
| CVE-2011-3182 | – | Aug 25 | PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of… Affected: through 5.3.6; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-2483 | – | Aug 25 | crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it… Affected: before 5.3.7 |
| CVE-2011-1657 | – | Aug 25 | The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service (application… Affected: 5.3.6 |
| CVE-2011-2202 | – | Jun 16 | The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to… Affected: through 5.3.6; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-1938 | – | May 31 | Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code… Affected: 5.3.3; 5.3.4; 5.3.5; 5.3.6 |
| CVE-2011-0441 | – | Mar 29 | The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/ Affected: 5.3.5 |
| CVE-2011-1471 | – | Mar 20 | Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed… Affected: before 5.2.11; 5.3.0 before 5.3.6 |
| CVE-2011-1470 | – | Mar 20 | The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by… Affected: through 5.3.5; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-1469 | – | Mar 20 | Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp://… Affected: through 5.3.5; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-1468 | – | Mar 20 | Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the… Affected: through 5.3.5; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
| CVE-2011-1467 | – | Mar 20 | Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause… Affected: through 5.3.5; 1.0; 2.0; 2.0b10; 3.0; 3.0.1; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)