the php group Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by the php group
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Use-After-Free Vulnerability in PHP Products by PHP Group
CVE-2024-11235PHP GroupPHP9.2CRITICALSQL Injection Risk in PHP SQLite Driver for PHP Versions
CVE-2022-31631PHP GroupPHP9.1CRITICALBuffer Overread Vulnerabilities in PHP Could Lead to Crashes or Memory Disclosure
CVE-2024-11233PHP GroupPHP8.2HIGHUncontrolled Long String Inputs Can Cause Integer Overflow and Out-of-Bounds Write in PHP
CVE-2024-8932PHP GroupPHP9.8CRITICALHTTP_REDIRECT_STATUS variable manipulation can lead to arbitrary file inclusion in PHP
CVE-2024-8927PHP GroupPHP7.5HIGHCVE-2024-4577 Vulnerability in PHP Could Allow Command Injection and Source Code Revelation
CVE-2024-8926PHP GroupPHP8.8HIGHPHP CGI Module Vulnerability Allows Malicious User to Reveal Source Code and Run Arbitrary PHP Code on Server
CVE-2024-4577PHP GroupPHP🥇📈💰👾🟡EPSS 94%🦅📰9.8CRITICALTrailing spaces in command names can lead to arbitrary command execution in PHP
CVE-2024-5585PHP GroupPHP7.7HIGHArbitrary Command Execution Vulnerability in PHP Proc Open Function
CVE-2024-1874PHP GroupPHP👾🟡EPSS 54%📰9.4CRITICALEndless Loop in mb_encode_mimeheader Function Could Lead to DoS Attack
CVE-2024-2757PHP GroupPHP7.5HIGHSecurity issue with external entity loading in XML without enabling it
CVE-2023-3823PHP GroupPHP👾📰7.5HIGHStack Buffer Overflow in PHP Phar File Loading Could Lead to Memory Corruption or RCE
CVE-2023-3824PHP GroupPHP🥇📈👾🟡EPSS 16%📰9.8CRITICALArray overrun in common path resolve code
CVE-2023-0568PHP GroupPHP7.5HIGHDoS vulnerability when parsing multipart request body
CVE-2023-0662PHP GroupPHP7.5HIGHHeap buffer overflow in finfo_buffer
CVE-2022-31627PHP GroupPHP7.7HIGHFreeing unallocated memory in php_pgsql_free_params()
CVE-2022-31625PHP GroupPHP8.1HIGHmysqlnd/pdo password buffer overflow
CVE-2022-31626PHP GroupPHP👾🟡7.5HIGHUAF due to php_filter_float() failing
CVE-2021-21708PHP GroupPHP8.2HIGHPHP-FPM memory access in root process leading to privilege escalation
CVE-2021-21703PHP GroupPHP7.8HIGHOOB Read in urldecode()
CVE-2020-7067PHP GroupPHP7.5HIGHmb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full
CVE-2020-7065PHP GroupPHP7.4HIGHNull Pointer Dereference in PHP Session Upload Progress
CVE-2020-7062PHP GroupPHP7.5HIGH
4 April 2025
12 February 2025
24 November 2024
22 November 2024
8 October 2024
9 June 2024
29 April 2024
11 August 2023
16 February 2023
28 July 2022
16 June 2022
27 February 2022
25 October 2021
27 April 2020
1 April 2020
27 February 2020
No more vulnerabilities to load.