PHP

CVEs (751)

• CVE-2015-8389CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.04

  PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object…

• CVE-2015-8386CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.07

  PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a…

• CVE-2015-8383CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.06

  PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by…

• CVE-2008-2108CriMay 7, 2008
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.04

  The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force…

• CVE-2015-8866CriMay 22, 2016
  PHP

  PHP
  risk 0.63cvss 9.6epss 0.04

  ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE)…

• CVE-2023-3824CriAug 11, 2023
  PHP

  PHP
  risk 0.62cvss 9.4epss 0.21

  In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.

• CVE-2015-8617CriJan 19, 2016
  PHP

  PHP
  risk 0.62cvss 9.8epss 0.23

  Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling.

• CVE-2019-11036CriMay 3, 2019
  PHP

  PHP
  risk 0.60cvss 9.1epss 0.07

  When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.

• CVE-2019-11035CriApr 18, 2019
  PHP

  PHP
  risk 0.60cvss 9.1epss 0.04

  When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.

• CVE-2017-11147CriJul 10, 2017
  PHP

  PHP
  risk 0.60cvss 9.1epss 0.05

  In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.

• CVE-2016-5114CriAug 7, 2016
  PHP

  PHP
  risk 0.60cvss 9.1epss 0.04

  sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer…

• CVE-2016-1903CriJan 19, 2016
  PHP

  PHP
  risk 0.60cvss 9.1epss 0.08

  The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large…

• CVE-2022-31631CriFeb 12, 2025
  PHP

  PHP
  risk 0.59cvss 9.1epss 0.02

  In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection…

• CVE-2019-11040CriJun 19, 2019
  PHP

  PHP
  risk 0.59cvss 9.1epss 0.04

  When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This…

• CVE-2019-11039CriJun 19, 2019
  PHP

  PHP
  risk 0.59cvss 9.1epss 0.03

  Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.

• CVE-2019-11034CriApr 18, 2019
  PHP

  PHP
  risk 0.59cvss 9.1epss 0.04

  When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.

• CVE-2018-19518HigNov 25, 2018
  PHP

  PHP
  risk 0.59cvss 7.5epss 0.95

  University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection,…

• CVE-2019-6977HigJan 27, 2019
  PHP

  PHP
  risk 0.58cvss 8.8epss 0.64

  gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an…

• CVE-2018-10549HigApr 29, 2018
  PHP

  PHP
  risk 0.58cvss 8.8epss 0.07

  An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exif_iif_add_value mishandles the case of a MakerNote that lacks a final '\0'…

• CVE-2016-5767HigAug 7, 2016
  Libgd

  Libgd
  risk 0.58cvss 8.8epss 0.07

  Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and…