PHP

CVEs (731)

• CVE-2002-2029Dec 31, 2002
  PHP

  PHP
  risk 0.05cvss —epss 0.25

  PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.

• CVE-2000-0967Dec 19, 2000
  PHP

  PHP
  risk 0.05cvss —epss 0.21

  PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.

• CVE-2015-4024Jun 9, 2015
  PHP

  PHP
  risk 0.04cvss —epss 0.50

  Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an…

• CVE-2014-8142Dec 20, 2014
  PHP

  PHP
  risk 0.04cvss —epss 0.53

  Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper…

• CVE-2011-1398Aug 30, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.10

  The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to…

• CVE-2012-3450Aug 6, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.11

  pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash)…

• CVE-2012-0789Feb 14, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.08

  Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.

• CVE-2012-0788Feb 14, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.09

  The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start…

• CVE-2012-0781Jan 18, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.11

  The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability…

• CVE-2011-4153Jan 18, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.12

  PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted…

• CVE-2011-1471Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.13

  Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.

• CVE-2011-1470Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.10

  The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.

• CVE-2011-1468Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.13

  Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.

• CVE-2011-1467Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.13

  Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.

• CVE-2011-0708Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.10

  exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.

• CVE-2011-0421Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.14

  The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP…

• CVE-2011-1092Mar 15, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.18

  Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.

• CVE-2011-0420Feb 19, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.14

  The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.

• CVE-2010-4645Jan 11, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.15

  strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly…

• CVE-2010-3870Nov 12, 2010
  PHP

  PHP
  risk 0.04cvss —epss 0.11

  The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted…