PHP

CVEs (751)

• CVE-2011-3182Aug 25, 2011
  PHP

  PHP
  risk 0.05cvss —epss 0.19

  PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the…

• CVE-2011-2202Jun 16, 2011
  PHP

  PHP
  risk 0.05cvss —epss 0.20

  The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a…

• CVE-2011-1938May 31, 2011
  PHP

  PHP
  risk 0.05cvss —epss 0.23

  Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

• CVE-2010-4409Dec 6, 2010
  PHP

  PHP
  risk 0.05cvss —epss 0.19

  Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument.

• CVE-2006-1490Mar 29, 2006
  PHP

  PHP
  risk 0.05cvss —epss 0.21

  PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a "binary safety" issue. NOTE: this issue…

• CVE-2003-0172Apr 2, 2003
  PHP

  PHP
  risk 0.05cvss —epss 0.19

  Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.

• CVE-2002-2029Dec 31, 2002
  PHP

  PHP
  risk 0.05cvss —epss 0.23

  PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.

• CVE-2000-0967Dec 19, 2000
  PHP

  PHP
  risk 0.05cvss —epss 0.21

  PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.

• CVE-2015-4024Jun 9, 2015
  PHP

  PHP
  risk 0.04cvss —epss 0.50

  Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an…

• CVE-2014-8142Dec 20, 2014
  PHP

  PHP
  risk 0.04cvss —epss 0.53

  Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper…

• CVE-2011-1398Aug 30, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.10

  The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to…

• CVE-2012-3450Aug 6, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.11

  pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash)…

• CVE-2012-0789Feb 14, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.08

  Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.

• CVE-2012-0788Feb 14, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.09

  The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start…

• CVE-2012-0781Jan 18, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.11

  The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability…

• CVE-2011-4153Jan 18, 2012
  PHP

  PHP
  risk 0.04cvss —epss 0.12

  PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted…

• CVE-2011-1471Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.13

  Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.

• CVE-2011-1470Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.10

  The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.

• CVE-2011-1468Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.13

  Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.

• CVE-2011-1467Mar 20, 2011
  PHP

  PHP
  risk 0.04cvss —epss 0.13

  Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.