PHP

CVEs (751)

• CVE-2021-21708HigFeb 27, 2022
  PHP

  PHP
  risk 0.54cvss 8.2epss 0.03

  In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it…

• CVE-2017-16642HigNov 7, 2017
  PHP

  PHP
  risk 0.54cvss 7.5epss 0.26

  In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to…

• CVE-2016-3142HigMar 31, 2016
  PHP

  PHP
  risk 0.54cvss 8.2epss 0.05

  The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) by placing a PK\x05\x06…

• CVE-2025-32294HigMay 23, 2025
  PHP

  PHP
  risk 0.53cvss 8.1epss 0.01

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Oxpitan oxpitan allows PHP Local File Inclusion.This issue affects Oxpitan: from n/a through <= 1.3.5.

• CVE-2024-11235HigApr 4, 2025
  PHP

  PHP
  risk 0.53cvss 8.1epss 0.01

  In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??=  operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example by supplying specially…

• CVE-2024-8926HigOct 8, 2024
  PHP

  PHP
  risk 0.53cvss 8.1epss 0.04

  In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for  CVE-2024-4577 https://github.com/advisories/GHSA-vxpp-6299-mxw3  may still be bypassed and the same command…

• CVE-2022-31626HigJun 16, 2022
  PHP

  PHP
  risk 0.53cvss 7.5epss 0.58

  In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow…

• CVE-2022-31625HigJun 16, 2022
  PHP

  PHP
  risk 0.53cvss 8.1epss 0.04

  In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE…

• CVE-2019-9675HigMar 11, 2019
  PHP

  PHP
  risk 0.53cvss 8.1epss 0.06

  An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently…

• CVE-2016-7412HigSep 17, 2016
  PHP

  PHP
  risk 0.53cvss 8.1epss 0.09

  ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via…

• CVE-2016-7133HigSep 12, 2016
  PHP

  PHP
  risk 0.53cvss 8.1epss 0.04

  Zend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc operations, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a long pathname.

• CVE-2007-1285HigMar 6, 2007
  PHP

  PHP
  risk 0.53cvss 7.5epss 0.18

  The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

• CVE-2026-6104CriMay 10, 2026
  PHP

  PHP
  risk 0.52cvss 9.1epss 0.00

  In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is passed to mb_convert_encoding() or related mbstring functions, the code incorrectly assumes that when strncasecmp() returns 0 it means the strings have the same…

• CVE-2011-3336HigFeb 12, 2020
  BSD

  libc
  risk 0.52cvss 7.5epss 0.06

  regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.

• CVE-2016-7478HigJan 11, 2017
  PHP

  PHP
  risk 0.52cvss 7.5epss 0.42

  Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.

• CVE-2021-21703HigOct 25, 2021
  PHP

  PHP
  risk 0.51cvss 7.8epss 0.01

  In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access…

• CVE-2015-2325HigJan 14, 2020
  Pcre

  Pcre
  risk 0.51cvss 7.8epss 0.02

  The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward…

• CVE-2017-11628HigJul 25, 2017
  PHP

  PHP
  risk 0.51cvss 7.8epss 0.03

  In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that…

• CVE-2016-6289HigJul 25, 2016
  PHP

  PHP
  risk 0.51cvss 7.8epss 0.04

  Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted…

• CVE-2023-0567HigMar 1, 2023
  PHP

  PHP
  risk 0.50cvss 7.7epss 0.01

  In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as…