Skip to content
Noroxi

php records

794 published records for vendor php. 7 of them have been exploited in the wild (listed in CISA KEV) and 13 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
7 · 0.9%
Weaponized
13 · 1.6%
Pre-auth RCE
167
With a fix record
71%
Median publish → KEV
584 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

794 records
  • CVE-2012-1823
    99Now

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle que

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    php · phpMay 11, 2012

  • CVE-2024-4577
    99Now

    Argument Injection in PHP-CGI

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    php · phpJun 9, 2024

  • CVE-2019-11043
    99Now

    Underflow in PHP-FPM can lead to RCE

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    php · phpOct 28, 2019

  • CVE-2026-109618
    96Now

    RCE via OOM corruption

    CriticalCVSS 9.2KEVWeaponizedEPSS 99%

    php · phpOct 21, 2026

  • CVE-2026-109619
    96Now

    RCE via stale global state

    CriticalCVSS 9.2KEVWeaponizedEPSS 99%

    php · phpOct 21, 2026

  • CVE-2020-28949
    86Now

    Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as fil

    HighCVSS 7.8KEVWeaponizedEPSS 84%

    php · archive tarNov 19, 2020

  • CVE-2020-36193
    81Now

    Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a relat

    HighCVSS 7.5KEVWeaponizedEPSS 70%

    php · archive tarJan 18, 2021

  • CVE-2015-0235
    68This week

    Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-depen

    CriticalCVSS 10.0WeaponizedEPSS 94%

    gnu · glibcJan 28, 2015

  • CVE-2018-7584
    65This week

    In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while pa

    CriticalCVSS 9.8Proof of conceptEPSS 87%

    php · phpMar 1, 2018

  • CVE-2018-19518
    59Plan

    University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of

    HighCVSS 7.5WeaponizedEPSS 96%

    php · phpNov 25, 2018

  • CVE-2019-6977
    56Plan

    gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.

    HighCVSS 8.8Proof of conceptEPSS 71%

    libgd · libgdJan 26, 2019

  • CVE-2016-3078
    56Plan

    Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-b

    CriticalCVSS 9.8Proof of conceptEPSS 56%

    php · phpAug 7, 2016

  • CVE-2005-1921
    54Plan

    Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1

    HighCVSS 7.5WeaponizedEPSS 79%

    php · xml rpcJul 5, 2005

  • CVE-2015-6834
    53Plan

    Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute

    CriticalCVSS 9.8Proof of conceptEPSS 46%

    php · phpMay 16, 2016

  • CVE-2022-31626
    52Plan

    mysqlnd/pdo password buffer overflow

    HighCVSS 8.8Proof of conceptEPSS 58%

    php · phpJun 16, 2022

  • CVE-2016-7479
    52Plan

    In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-af

    CriticalCVSS 9.8No exploitEPSS 41%

    php · phpJan 11, 2017

  • CVE-2012-2311
    51Plan

    sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle que

    HighCVSS 7.5Proof of conceptEPSS 69%

    php · phpMay 11, 2012

  • CVE-2016-7480
    51Plan

    The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, whic

    CriticalCVSS 9.8No exploitEPSS 41%

    php · phpJan 11, 2017

  • CVE-2021-32610
    50Plan

    In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

    HighCVSS 7.1No exploitEPSS 73%

    php · archive tarJul 30, 2021

  • CVE-2005-3390
    50Plan

    The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to mod

    HighCVSS 7.5Proof of conceptEPSS 65%

    php · phpNov 1, 2005

  • CVE-2015-6835
    50Plan

    The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, w

    CriticalCVSS 9.8Proof of conceptEPSS 36%

    php · phpMay 16, 2016

  • CVE-2016-3141
    50Plan

    Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a

    CriticalCVSS 9.8Proof of conceptEPSS 36%

    php · phpMar 31, 2016

  • CVE-2016-3074
    50Plan

    Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or

    CriticalCVSS 9.8Proof of conceptEPSS 35%

    libgd · libgdApr 26, 2016

  • CVE-2004-0542
    49Plan

    PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arb

    CriticalCVSS 10.0No exploitEPSS 31%

    php · phpAug 6, 2004

  • CVE-2018-5712
    48Plan

    An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1.

    MediumCVSS 6.1No exploitEPSS 79%

    php · phpJan 16, 2018