PHP

CVEs (751)

• CVE-2025-1220LowJul 13, 2025
  PHP

  PHP
  risk 0.17cvss 3.7epss 0.01

  In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 some functions like fsockopen() lack validation that the hostname supplied does not contain null characters. This may lead to other functions like parse_url() treat the hostname in…

• CVE-2023-3247LowJul 22, 2023
  PHP

  PHP
  risk 0.17cvss 2.6epss 0.01

  In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could…

• CVE-2022-31628LowSep 28, 2022
  PHP

  PHP
  risk 0.15cvss 2.3epss 0.01

  In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

• CVE-2015-0235Jan 28, 2015
  glibc

  glibc
  risk 0.11cvss —epss 0.95

  Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

• CVE-2018-7584CriMar 1, 2018
  PHP

  PHP
  risk 0.10cvss 9.8epss 0.87

  In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in…

• CVE-2011-4885Dec 30, 2011
  PHP

  PHP
  risk 0.10cvss —epss 0.83

  PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

• CVE-2012-2311May 11, 2012
  PHP

  PHP
  risk 0.09cvss —epss 0.70

  sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing…

• CVE-2012-2329May 11, 2012
  PHP

  PHP
  risk 0.08cvss —epss 0.63

  Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) via a long string in the header of an HTTP request.

• CVE-2005-3390Nov 1, 2005
  PHP

  PHP
  risk 0.08cvss —epss 0.66

  The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS"…

• CVE-2012-2336May 11, 2012
  PHP

  PHP
  risk 0.07cvss —epss 0.51

  sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by…

• CVE-2005-3388Nov 1, 2005
  PHP

  PHP
  risk 0.07cvss —epss 0.49

  Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."

• CVE-2004-0595Jul 27, 2004
  PHP

  PHP
  risk 0.07cvss —epss 0.45

  The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore…

• CVE-2004-0594Jul 27, 2004
  PHP

  PHP
  risk 0.07cvss —epss 0.55

  The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function…

• CVE-2015-0273Mar 30, 2015
  PHP

  PHP
  risk 0.06cvss —epss 0.43

  Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data…

• CVE-2013-6420Dec 17, 2013
  PHP

  PHP
  risk 0.06cvss —epss 0.36

  The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a…

• CVE-2012-2386Jul 7, 2012
  PHP

  PHP
  risk 0.06cvss —epss 0.42

  Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tar file that triggers a…

• CVE-2007-1286Mar 6, 2007
  PHP

  PHP
  risk 0.06cvss —epss 0.40

  Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

• CVE-2015-4148Jun 9, 2015
  PHP

  PHP
  risk 0.05cvss —epss 0.20

  The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obtain sensitive information by providing crafted serialized data with an int data…

• CVE-2012-2376May 21, 2012
  PHP

  PHP
  risk 0.05cvss —epss 0.20

  Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012.

• CVE-2012-0830Feb 6, 2012
  PHP

  PHP
  risk 0.05cvss —epss 0.30

  The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect…