PHP

CVEs (751)

• CVE-2016-5766HigAug 7, 2016
  Libgd

  Libgd
  risk 0.58cvss 8.8epss 0.07

  Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and…

• CVE-2016-6297HigJul 25, 2016
  PHP

  PHP
  risk 0.58cvss 8.8epss 0.05

  Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a…

• CVE-2016-4343HigMay 22, 2016
  PHP

  PHP
  risk 0.58cvss 8.8epss 0.04

  The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service (uninitialized pointer dereference) or possibly have unspecified other impact…

• CVE-2016-4342HigMay 22, 2016
  PHP

  PHP
  risk 0.58cvss 8.8epss 0.05

  ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) TAR,…

• CVE-2026-7261CriMay 10, 2026
  PHP

  PHP
  risk 0.57cvss 9.8epss 0.00

  In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is configured with SOAP_PERSISTENCE_SESSION, the handler object is persisted across requests via session storage. However, in the case SOAP requests results in…

• CVE-2026-6722CriMay 10, 2026
  PHP

  PHP
  risk 0.57cvss 9.8epss 0.01

  In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When an apache:Map node…

• CVE-2025-14179CriMay 10, 2026
  PHP

  PHP
  risk 0.57cvss 9.8epss 0.00

  In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL queries. During token-by-token query construction, a string token containing a NUL byte is copied via…

• CVE-2024-1874CriApr 29, 2024
  PHP

  PHP
  risk 0.57cvss 9.4epss 0.33

  In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would…

• CVE-2022-37454CriOct 21, 2022
  PHP

  PHP
  risk 0.57cvss 9.8epss 0.05

  The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

• CVE-2016-7398CriSep 6, 2019
  PHP

  PHP
  risk 0.57cvss 9.8epss 0.07

  A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests.

• CVE-2018-19520HigNov 25, 2018
  PHP

  PHP
  risk 0.57cvss 8.8epss 0.03

  An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functions such as eval, but does not prevent use of preg_replace 'e' calls, allowing users to execute arbitrary code by…

• CVE-2016-10160CriJan 24, 2017
  PHP

  PHP
  risk 0.57cvss 9.8epss 0.07

  Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.

• CVE-2016-5385HigJul 19, 2016
  PHP

  PHP
  risk 0.57cvss 8.1epss 0.50

  PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an…

• CVE-2016-6174HigJul 12, 2016
  PHP

  PHP
  risk 0.57cvss 8.1epss 0.12

  applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the…

• CVE-2023-3823HigAug 11, 2023
  PHP

  PHP
  risk 0.56cvss 8.6epss 0.02

  In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly…

• CVE-2016-5096HigAug 7, 2016
  PHP

  PHP
  risk 0.56cvss 8.6epss 0.04

  Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument.

• CVE-2016-5095HigAug 7, 2016
  PHP

  PHP
  risk 0.56cvss 8.6epss 0.03

  Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a…

• CVE-2016-5094HigAug 7, 2016
  PHP

  PHP
  risk 0.56cvss 8.6epss 0.05

  Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars…

• CVE-2016-5093HigAug 7, 2016
  PHP

  PHP
  risk 0.56cvss 8.6epss 0.05

  The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly…

• CVE-2015-8616HigJan 19, 2016
  PHP

  PHP
  risk 0.56cvss 8.6epss 0.02

  Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging the relationships…