PHP

CVEs (731)

• CVE-2015-8387HigDec 2, 2015
  Pcre

  Pcre
  risk 0.48cvss 7.3epss 0.04

  PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp…

• CVE-2014-9426HigDec 31, 2014
  PHP

  PHP
  risk 0.48cvss 7.3epss 0.02

  The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in PHP through 5.6.4 attempts to perform a free operation on a stack-based character array, which allows remote attackers to cause a denial of service (memory corruption or application crash) or…

• CVE-2019-11042HigAug 9, 2019
  PHP

  PHP
  risk 0.47cvss 7.1epss 0.04

  When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This…

• CVE-2019-11041HigAug 9, 2019
  PHP

  PHP
  risk 0.47cvss 7.1epss 0.04

  When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This…

• CVE-2018-5712MedJan 16, 2018
  PHP

  PHP
  risk 0.46cvss 6.1epss 0.80

  An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.

• CVE-2017-9067HigMay 18, 2017
  PHP

  PHP
  risk 0.46cvss 7.0epss 0.01

  In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal.

• CVE-2016-3185HigMay 16, 2016
  PHP

  PHP
  risk 0.46cvss 7.1epss 0.03

  The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and…

• CVE-2024-2756MedApr 29, 2024
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.38

  Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.

• CVE-2020-7064MedApr 1, 2020
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.04

  In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or…

• CVE-2020-7061MedFeb 27, 2020
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.04

  In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.

• CVE-2020-7060MedFeb 10, 2020
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.09

  When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to…

• CVE-2020-7059MedFeb 10, 2020
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.07

  When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or…

• CVE-2019-11049MedDec 23, 2019
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.04

  In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory…

• CVE-2017-7890MedAug 2, 2017
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.03

  The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700…

• CVE-2016-10161HigJan 24, 2017
  PHP

  PHP
  risk 0.43cvss 7.5epss 0.13

  The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a…

• CVE-2016-6207MedAug 12, 2016
  Libgd

  Libgd
  risk 0.43cvss 6.5epss 0.06

  Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.

• CVE-2013-7456HigAug 7, 2016
  Libgd

  Libgd
  risk 0.43cvss 7.6epss 0.04

  gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted…

• CVE-2016-6292MedJul 25, 2016
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.04

  The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted JPEG image.

• CVE-2015-4598MedMay 16, 2016
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.04

  PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD…

• CVE-2015-3411MedMay 16, 2016
  PHP

  PHP
  risk 0.43cvss 6.5epss 0.03

  PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the…