| CVE-2026-109619 |
Exploited
RCE via stale global state
|
9.2
Critical
|
Oct 21, 2026 |
| CVE-2026-109618 |
Exploited
RCE via OOM corruption
|
9.2
Critical
|
Oct 21, 2026 |
| CVE-2026-6722 |
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP…
|
9.5
Critical
|
May 10, 2026 |
| CVE-2024-11235 |
In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and…
|
9.2
Critical
|
Apr 4, 2025 |
| CVE-2022-31631 |
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote…
|
9.1
Critical
|
Feb 12, 2025 |
| CVE-2024-11236 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critical
|
Nov 24, 2024 |
| CVE-2024-8932 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critical
|
Nov 22, 2024 |
| CVE-2024-4577 |
Exploited
PHP-CGI OS Command Injection Vulnerability
|
9.8
Critical
|
Jun 9, 2024 |
| CVE-2024-1874 |
In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with…
|
9.4
Critical
|
Apr 29, 2024 |
| CVE-2023-3824 |
In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while…
|
9.4
Critical
|
Aug 11, 2023 |