| CVE-2026-6735 |
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper…
|
7.3
High
|
May 10, 2026 |
| CVE-2025-14177 |
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before…
|
6.3
Medium
|
Dec 27, 2025 |
| CVE-2025-14178 |
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before…
|
6.5
Medium
|
Dec 27, 2025 |
| CVE-2025-14180 |
In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1…
|
8.2
High
|
Dec 27, 2025 |
| CVE-2025-1735 |
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping…
|
5.9
Medium
|
Jul 13, 2025 |
| CVE-2025-1220 |
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 some functions like…
|
3.7
Low
|
Jul 13, 2025 |
| CVE-2025-6491 |
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data…
|
5.9
Medium
|
Jul 13, 2025 |
| CVE-2024-11235 |
In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and…
|
9.2
Critical
|
Apr 4, 2025 |
| CVE-2025-1861 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Medium
|
Mar 30, 2025 |
| CVE-2025-1736 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Medium
|
Mar 30, 2025 |
| CVE-2025-1734 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Medium
|
Mar 30, 2025 |
| CVE-2025-1219 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Medium
|
Mar 30, 2025 |
| CVE-2025-1217 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Medium
|
Mar 29, 2025 |
| CVE-2022-31631 |
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote…
|
9.1
Critical
|
Feb 12, 2025 |
| CVE-2024-11233 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error…
|
4.8
Medium
|
Nov 24, 2024 |
| CVE-2024-11234 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured…
|
4.8
Medium
|
Nov 24, 2024 |
| CVE-2024-11236 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critical
|
Nov 24, 2024 |
| CVE-2024-8929 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the…
|
5.8
Medium
|
Nov 22, 2024 |
| CVE-2024-8932 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critical
|
Nov 22, 2024 |
| CVE-2024-9026 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it…
|
3.3
Low
|
Oct 8, 2024 |
| CVE-2024-8927 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, HTTP_REDIRECT_STATUS variable is used…
|
7.5
High
|
Oct 8, 2024 |
| CVE-2024-8926 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard…
|
8.1
High
|
Oct 8, 2024 |
| CVE-2024-8925 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form…
|
3.1
Low
|
Oct 8, 2024 |
| CVE-2024-2408 |
The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default),…
|
5.9
Medium
|
Jun 9, 2024 |
| CVE-2024-4577 |
Exploited
PHP-CGI OS Command Injection Vulnerability
|
9.8
Critical
|
Jun 9, 2024 |