Latest vulnerabilities for "php"

PostgreSQL postgresqlSQL Injection, Null Pointer Dereference

Risk 19

Severity

4

First published (updated )

REDHAT-BUG-2378689

PHP PHPUse After Free

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2357531

BleepingComputerCritical PHP RCE vulnerability mass exploited in new attacks

Exploited

Zeroday

First published (updated )

News

BleepingComputer

Phpgurukul Land Record System ProjectSQL Injection

Risk 30

Severity

5.5

EPSS

0.08%

First published (updated )

CVE-2025-25462

PHP PHPIn PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SA…

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2317144

The PHP Group PHPAccording to https://www.php.net/manual/en/security.cgi-bin.force-redirect.php, the configuration di…

Risk 19

Severity

4

First published (updated )

REDHAT-BUG-2317051

PHP security releases 8.1.28, 8.2.18, & 8.3.6

First published (updated )

https://seclists.org/oss-sec/2024/q2/113

composer/phenx/php-svg-libphp-svg-lib lacks path validation on font through SVG inline styles

Risk 62

Severity

9.8

EPSS

0.04%

First published (updated )

CVE-2024-25117

PHP PHPBuffer overflow and overread in phar_dir_read()

Risk 92

Severity

9.8

First published (updated )

CVE-2023-3824

PHP PHPSecurity issue with external entity loading in XML without enabling it

Risk 68

Severity

8.6

First published (updated )

CVE-2023-3823

ubuntu/php8.1Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

Risk 24

Severity

4.3

First published (updated )

CVE-2023-3247

PHP PHPPotential buffer overflow in php_cli_server_startup_workers

Risk 37

Severity

6.2

First published (updated )

CVE-2022-4900

PHP PHPCVE-2023-0567[0]: PHP: Password_verify() always return true with some hash [0] https://security-tra…

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2170771

PHP PHPIn PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution functio…

Risk 18

Severity

4

First published (updated )

REDHAT-BUG-2170770

PHP PHPIn PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in…

Risk 19

Severity

4

First published (updated )

REDHAT-BUG-2170761

F5 BIG-IPArray overrun in common path resolve code

Risk 79

Severity

8.1

First published (updated )

CVE-2023-0568

F5 BIG-IPDoS vulnerability when parsing multipart request body

Risk 46

Severity

7.5

First published (updated )

CVE-2023-0662

PHP PHPPDO::quote() may return unquoted string

Risk 67

Severity

9.1

First published (updated )

CVE-2022-31631

PHP PHPOOB read due to insufficient input validation in imageloadfont()

Risk 53

Severity

7.1

First published (updated )

CVE-2022-31630

PHP PHPInteger Overflow, Buffer Overflow

Risk 89

Severity

9.8

First published (updated )

CVE-2022-37454

PHP PHP$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities

Risk 39

Severity

6.5

First published (updated )

CVE-2022-31629

PHP PHPphar wrapper can occur dos when using quine gzip file

Risk 33

Severity

5.5

First published (updated )

CVE-2022-31628

PHP PHPHeap buffer overflow in finfo_buffer

Risk 86

Severity

9.8

First published (updated )

CVE-2022-31627

PHP PHPmysqlnd/pdo password buffer overflow

Risk 79

Severity

8.8

First published (updated )

CVE-2022-31626

PHP PHPSpecial characters break path parsing in XML functions

Risk 28

Severity

5.3

First published (updated )

CVE-2021-21707

PHP PHPPHP-FPM memory access in root process leading to privilege escalation

Risk 65

Severity

7.8

First published (updated )

CVE-2021-21703

PHP PHPZipArchive::extractTo may extract outside of destination dir

Risk 37

Severity

6.5

First published (updated )

CVE-2021-21706

PHP PHPIncorrect URL validation in FILTER_VALIDATE_URL

Risk 27

Severity

5.3

First published (updated )

CVE-2021-21705

PHP PHPMultiple vulnerabilities in Firebird client extension

Risk 35

Severity

5.9

First published (updated )

CVE-2021-21704

Xmbforum2 XmbXSS

Risk 38

Severity

6.1

First published (updated )

CVE-2021-29399

Trending

Versions

PostgreSQL postgresqlSQL Injection, Null Pointer Dereference

PHP PHPUse After Free

BleepingComputerCritical PHP RCE vulnerability mass exploited in new attacks

Phpgurukul Land Record System ProjectSQL Injection

PHP PHPIn PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SA…

Don't miss critical vulnerabilities

The PHP Group PHPAccording to https://www.php.net/manual/en/security.cgi-bin.force-redirect.php, the configuration di…

PHP security releases 8.1.28, 8.2.18, & 8.3.6

composer/phenx/php-svg-libphp-svg-lib lacks path validation on font through SVG inline styles

PHP PHPBuffer overflow and overread in phar_dir_read()

PHP PHPSecurity issue with external entity loading in XML without enabling it

Don't miss critical vulnerabilities

ubuntu/php8.1Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

PHP PHPPotential buffer overflow in php_cli_server_startup_workers

PHP PHPCVE-2023-0567[0]: PHP: Password_verify() always return true with some hash [0] https://security-tra…

PHP PHPIn PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution functio…

PHP PHPIn PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in…

Don't miss critical vulnerabilities

F5 BIG-IPArray overrun in common path resolve code

F5 BIG-IPDoS vulnerability when parsing multipart request body

PHP PHPPDO::quote() may return unquoted string

PHP PHPOOB read due to insufficient input validation in imageloadfont()

PHP PHPInteger Overflow, Buffer Overflow

Don't miss critical vulnerabilities

PHP PHP$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities

PHP PHPphar wrapper can occur dos when using quine gzip file

PHP PHPHeap buffer overflow in finfo_buffer

PHP PHPmysqlnd/pdo password buffer overflow

PHP PHPSpecial characters break path parsing in XML functions

Don't miss critical vulnerabilities

PHP PHPPHP-FPM memory access in root process leading to privilege escalation

PHP PHPZipArchive::extractTo may extract outside of destination dir

PHP PHPIncorrect URL validation in FILTER_VALIDATE_URL

PHP PHPMultiple vulnerabilities in Firebird client extension

Xmbforum2 XmbXSS

Don't miss critical vulnerabilities

Company

Resources

Contact