| CVE-2024-11233 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error…
|
4.8
Medium
|
Nov 24, 2024 |
| CVE-2024-11234 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured…
|
4.8
Medium
|
Nov 24, 2024 |
| CVE-2024-11236 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critical
|
Nov 24, 2024 |
| CVE-2024-8929 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the…
|
5.8
Medium
|
Nov 22, 2024 |
| CVE-2024-8932 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critical
|
Nov 22, 2024 |
| CVE-2024-4577 |
Exploited
PHP-CGI OS Command Injection Vulnerability
|
9.8
Critical
|
Jun 9, 2024 |
| CVE-2024-1874 |
In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with…
|
9.4
Critical
|
Apr 29, 2024 |
| CVE-2024-2757 |
In PHP 8.3.* before 8.3.5, function mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of…
|
7.5
High
|
Apr 29, 2024 |
| CVE-2024-3096 |
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with…
|
6.5
Medium
|
Apr 29, 2024 |
| CVE-2023-0567 |
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some…
|
7.7
High
|
Feb 16, 2023 |