PHP

CVEs (730)

• CVE-2015-8880CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.03

  Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering an error.

• CVE-2015-8876CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.08

  Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method…

• CVE-2016-4073CriMay 20, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted…

• CVE-2016-4072CriMay 20, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.

• CVE-2015-8835CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application…

• CVE-2015-5589CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service (segmentation fault) or possibly…

• CVE-2015-4642CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.06

  The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the…

• CVE-2015-4601CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.08

  PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a…

• CVE-2015-4116CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.05

  Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.

• CVE-2016-1283CriJan 3, 2016
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.08

  The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote…

• CVE-2015-8394CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.05

  PCRE before 8.38 mishandles the (?() and (?(R) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object…

• CVE-2015-8391CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.06

  The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript…

• CVE-2015-8390CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.05

  PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp…

• CVE-2015-8389CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.04

  PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object…

• CVE-2015-8386CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.07

  PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a…

• CVE-2015-8383CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.06

  PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by…

• CVE-2008-2108CriMay 7, 2008
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.04

  The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force…

• CVE-2015-8866CriMay 22, 2016
  PHP

  PHP
  risk 0.63cvss 9.6epss 0.04

  ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE)…

• CVE-2023-3824CriAug 11, 2023
  PHP

  PHP
  risk 0.62cvss 9.4epss 0.08

  In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.

• CVE-2015-8617CriJan 19, 2016
  PHP

  PHP
  risk 0.62cvss 9.8epss 0.24

  Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling.