| CVE-2026-14355 |
In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD…
|
5.6
Medium
|
Jul 3, 2026 |
| CVE-2024-9026 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it…
|
3.3
Low
|
Oct 8, 2024 |
| CVE-2024-8927 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, HTTP_REDIRECT_STATUS variable is used…
|
7.5
High
|
Oct 8, 2024 |
| CVE-2024-8926 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard…
|
8.1
High
|
Oct 8, 2024 |
| CVE-2024-8925 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form…
|
3.1
Low
|
Oct 8, 2024 |
| CVE-2024-2408 |
The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default),…
|
5.9
Medium
|
Jun 9, 2024 |
| CVE-2024-5585 |
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if…
|
7.7
High
|
Jun 9, 2024 |
| CVE-2024-5458 |
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering…
|
5.3
Medium
|
Jun 9, 2024 |
| CVE-2014-3622 |
Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x before 5.6.1 might…
|
Not rated
|
Feb 19, 2020 |
| CVE-2019-11043 |
Exploited
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
|
8.7
High
|
Oct 28, 2019 |