php

756 tracked vulnerabilities.

CVE-2010-4699
PHP < 5.3.4 - Incomplete Output Array via Iconv MIME Header Decoding
Jan 18, 2011
EPSS 0.00
CVE-2010-4698
PHP <5.2.15, <5.3.4 - Buffer Overflow
Jan 18, 2011
EPSS 0.09
CVE-2010-4697
PHP <5.2.15, 5.3.x <5.3.4 - Use After Free
Jan 18, 2011
EPSS 0.01
CVE-2010-4645
PHP 5.2-5.2.16 and 5.3-5.3.4 - Denial of Service via Floating-Point Parsing
Jan 11, 2011
EPSS 0.21
CVE-2010-4150
PHP 5.2-5.3 - Use-After-Free in IMAP Extension
Dec 07, 2010
EPSS 0.17
CVE-2010-4409
PHP < 5.3.3 - Denial of Service via NumberFormatter::getSymbol Integer Overflow
Dec 06, 2010
EPSS 0.31
CVE-2010-3870
PHP < 5.2.14 - Cross-Site Scripting and SQL Injection Protection Bypass via utf8_decode
Nov 12, 2010
EPSS 0.01
CVE-2010-3709
PHP 5.2.0-5.2.14 and 5.3.0-5.3.3 - Denial of Service via ZipArchive::getArchiveComment
Nov 09, 2010
EPSS 0.09
CVE-2010-3436
PHP 5.3.x-5.3.3 - Open Basedir Restriction Bypass via Filename Length
Nov 09, 2010
EPSS 0.04
CVE-2010-3710
PHP 5.2.x-5.2.14 and 5.3.x-5.3.3 - Denial of Service via Long Email Address in filter_var
Oct 25, 2010
EPSS 0.03
CVE-2010-2950
PHP 5.3.x-5.3.3 - Format String Vulnerability in phar_stream_flush
Sep 28, 2010
EPSS 0.01
CVE-2010-2531
PHP 5.2.0-5.2.13 and 5.3.0-5.3.2 - Sensitive Information Exposure via var_export Fatal Error Handling
Aug 20, 2010
EPSS 0.06
CVE-2010-2484
PHP 5.2 - Exposure of Sensitive Information via strrchr Function Interruption
Aug 20, 2010
EPSS 0.00
CVE-2010-3065
PHP <5.2.14 & <5.3.3 - Code Injection
Aug 20, 2010
EPSS 0.00
CVE-2010-3064
PHP 5.3-5.3.2 - Stack-Based Buffer Overflow in Mysqlnd Extension via Long Username or Database Name
Aug 20, 2010
EPSS 0.01
CVE-2010-3063
PHP 5.3-5.3.2 - Heap-Based Buffer Overflow in php_mysqlnd_read_error_from_line
Aug 20, 2010
EPSS 0.00
CVE-2010-3062
PHP 5.3-5.3.2 - Exposure of Sensitive Information via Mysqlnd Length Value Handling
Aug 20, 2010
EPSS 0.01
CVE-2010-2225
PHP 5.2.x and 5.3.x through 5.3.2 - Use-After-Free in SplObjectStorage Unserializer
Jun 24, 2010
EPSS 0.02
CVE-2010-2191
PHP 5.2-5.2.13 and 5.3-5.3.2 - Memory Corruption via Userspace Interruption
Jun 08, 2010
EPSS 0.01
CVE-2010-2190
PHP 5.2-5.2.13 and 5.3-5.3.2 - Memory Contents Exposure via Interruption of trim/ltrim/rtrim/substr_replace Functions
Jun 08, 2010
EPSS 0.01
CVE-2010-2101
PHP 5.2-5.2.13 and 5.3-5.3.2 - Memory Contents Exposure via Userspace Interruption
May 27, 2010
EPSS 0.01
CVE-2010-2100
PHP 5.2-5.2.13 and 5.3-5.3.2 - Information Disclosure via Userspace Interruption of Internal Functions
May 27, 2010
EPSS 0.01
CVE-2010-2097
PHP 5.2-5.2.13 and 5.3-5.3.2 - Memory Contents Exposure via Userspace Interruption of iconv Functions
May 27, 2010
EPSS 0.01
CVE-2010-2094
PHP 5.3 - Format String Vulnerability in phar Extension
May 27, 2010
EPSS 0.03
CVE-2010-2093
PHP 5.2-5.2.13 and 5.3-5.3.2 - Use-After-Free in Request Shutdown
May 27, 2010
EPSS 0.00
Products
php 723 pear 5 archive_tar 4 frankenphp 2 pearweb 2 php_script_index 2 animated_smiley_generator 1 ar_memberscript 1 blog_cms 1 bloq 1 com_extensions 1 directory_listing_script 1 errordocs 1 ext-http 1 f1_maxs_file_uploader 1 imagick 1 memcached 1 mysql_banner_exchange 1 mysql_extension 1 pear_archive_tar 1 pecl_http 1 php_fi 1 phpsquidpass 1 xhprof 1 xml_rpc 1
Quick Filters
Critical CVEs With Exploits In CISA KEV