Filter
AND
-Infinity
0

PHPIn PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SA…

First published (updated )

Ubuntu PHP-FPMPHP-FPM logs from children may be altered

3.3
EPSS
0.04%
First published (updated )

PHP<a href="https://access.redhat.com/security/cve/CVE-2023-0567">CVE-2023-0567</a>[0]: PHP: Password_v…

First published (updated )

PHPAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x befo…

First published (updated )

debian/php5The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrar…

3.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPInfoleak

2.6
First published (updated )

PHPacinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overw…

3.3
First published (updated )

PHPIt was reported[1] to the full-disclosure mailing list that PHP's configure script uses a predictabl…

First published (updated )

PHPOn <a href="http://git.php.net/?p=php-src.git;a=blob;f=ext/soap/php_sdl.c;h=0ac4c2ed7a9bf87bb454db58…

First published (updated )

PHPpdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly…

2.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPA security flaw was found in the way the com_print_typeinfo() routine of the PHP scripting language …

First published (updated )

PHPIt was reported that ZipArchive() would segfault when opening an empty archive with the FL_UNCHANGED…

First published (updated )

PHPKees Cook reported an information leak flaw in the PHP's XMLWriter, triggered by an invalid UTF-8 st…

First published (updated )

PHPThe upstream PHP 5.2.14 and 5.3.3 releases corrected an information disclosure flaw where the var_ex…

First published (updated )

PHPPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior …

2.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPXSS

2.6
First published (updated )

PHPInput Validation

2.1
First published (updated )

PHPThe imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which…

2.1
First published (updated )

PHPThe mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x …

2.6
First published (updated )

PHPInput Validation, CRLF Injection

2.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPPHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server ht…

3.6
First published (updated )

PHPInteger Overflow

2.6
First published (updated )

PHPBuffer Overflow

2.6
First published (updated )

PHPBuffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows lo…

2.1
First published (updated )

PHPThe cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read file…

2.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPPHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executi…

2.1
First published (updated )

PHPThe copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read a…

2.1
First published (updated )

PHPDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open…

2.6
First published (updated )

PHPArgument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail an…

3.2
First published (updated )

PHPXSS

2.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203