Filter
AND
PHPBuffer overflow and overread in phar_dir_read()
9.8
First published (updated )
PHPSecurity issue with external entity loading in XML without enabling it
8.6
First published (updated )
PHPDoS vulnerability when parsing multipart request body
7.5
First published (updated )
PHPPHP-CGI OS Command Injection Vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHPFilter bypass in filter_var (FILTER_VALIDATE_URL)
5.3
EPSS
0.08%
First published (updated )
PHPpassword_verify() always returns true for some invalid hashes
8.1
First published (updated )
ubuntu/php8.1Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
4.3
First published (updated )
PHPConfiguring a proxy in a stream context might allow for CRLF injection in URIs
7.2
First published (updated )
PHPInteger overflow in the firebird and dblib quoters causing OOB writes
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHPSingle byte overread with convert.quoted-printable-decode filter
8.2
First published (updated )
PHPCommand injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)
8.8
EPSS
0.44%
First published (updated )
PHP$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities
6.5
First published (updated )
PHPOOB read due to insufficient input validation in imageloadfont()
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHPphar wrapper can occur dos when using quine gzip file
5.5
First published (updated )
PHPPotential buffer overflow in php_cli_server_startup_workers
6.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PHPFreeing unallocated memory in php_pgsql_free_params()
8.1
First published (updated )