PHP

CVEs (731)

• CVE-2015-8935MedAug 7, 2016
  PHP

  PHP
  risk 0.33cvss 6.1epss 0.03

  The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet…

• CVE-2019-11050MedDec 23, 2019
  PHP

  PHP
  risk 0.32cvss 4.8epss 0.08

  When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to…

• CVE-2019-11047MedDec 23, 2019
  PHP

  PHP
  risk 0.32cvss 4.8epss 0.07

  When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to…

• CVE-2015-3152MedMay 16, 2016
  MariaDB

  MariaDB
  risk 0.32cvss 5.9epss 0.07

  Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM"…

• CVE-2018-10545MedApr 29, 2018
  PHP

  PHP
  risk 0.31cvss 4.7epss 0.01

  An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl call, allowing one user (in a multiuser…

• CVE-2024-4577KEVJun 9, 2024
  PHP

  PHP
  risk 0.29cvss —epss 1.00

  In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions.…

• CVE-2018-14851MedAug 2, 2018
  PHP

  PHP
  risk 0.29cvss 5.5epss 0.04

  exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.

• CVE-2021-21705MedOct 4, 2021
  PHP

  PHP
  risk 0.28cvss 4.3epss 0.02

  In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly…

• CVE-2020-7070MedOct 2, 2020
  PHP

  PHP
  risk 0.28cvss 4.3epss 0.05

  In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading…

• CVE-2019-11045LowDec 23, 2019
  PHP

  PHP
  risk 0.25cvss 3.7epss 0.09

  In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is…

• CVE-2020-7068MedSep 9, 2020
  PHP

  PHP
  risk 0.24cvss 4.8epss 0.02

  In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.

• CVE-2019-11046LowDec 23, 2019
  PHP

  PHP
  risk 0.24cvss 3.7epss 0.04

  In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters that are identified as numeric by the OS…

• CVE-2019-11044LowDec 23, 2019
  PHP

  PHP
  risk 0.24cvss 3.7epss 0.05

  In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is…

• CVE-2014-9767MedMay 22, 2016
  PHP

  PHP
  risk 0.21cvss 4.3epss 0.05

  Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a…

• CVE-2023-3247LowJul 22, 2023
  PHP

  PHP
  risk 0.17cvss 2.6epss 0.01

  In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could…

• CVE-2022-31628LowSep 28, 2022
  PHP

  PHP
  risk 0.15cvss 2.3epss 0.01

  In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

• CVE-2015-0235Jan 28, 2015
  glibc

  glibc
  risk 0.11cvss —epss 0.95

  Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

• CVE-2018-7584CriMar 1, 2018
  PHP

  PHP
  risk 0.10cvss 9.8epss 0.88

  In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in…

• CVE-2011-4885Dec 30, 2011
  PHP

  PHP
  risk 0.10cvss —epss 0.84

  PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

• CVE-2012-2311May 11, 2012
  PHP

  PHP
  risk 0.09cvss —epss 0.69

  sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing…