| CVE-2026-6735 |
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper…
|
7.3
Élevée
|
10 mai 2026 |
| CVE-2025-14177 |
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before…
|
6.3
Moyenne
|
27 déc. 2025 |
| CVE-2025-14178 |
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before…
|
6.5
Moyenne
|
27 déc. 2025 |
| CVE-2025-14180 |
In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1…
|
8.2
Élevée
|
27 déc. 2025 |
| CVE-2025-1735 |
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping…
|
5.9
Moyenne
|
13 juil. 2025 |
| CVE-2025-1220 |
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 some functions like…
|
3.7
Faible
|
13 juil. 2025 |
| CVE-2025-6491 |
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data…
|
5.9
Moyenne
|
13 juil. 2025 |
| CVE-2024-11235 |
In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and…
|
9.2
Critique
|
4 avr. 2025 |
| CVE-2025-1861 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Moyenne
|
30 mars 2025 |
| CVE-2025-1736 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Moyenne
|
30 mars 2025 |
| CVE-2025-1734 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Moyenne
|
30 mars 2025 |
| CVE-2025-1219 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Moyenne
|
30 mars 2025 |
| CVE-2025-1217 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when…
|
6.3
Moyenne
|
29 mars 2025 |
| CVE-2022-31631 |
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote…
|
9.1
Critique
|
12 févr. 2025 |
| CVE-2024-11233 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error…
|
4.8
Moyenne
|
24 nov. 2024 |
| CVE-2024-11234 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured…
|
4.8
Moyenne
|
24 nov. 2024 |
| CVE-2024-11236 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critique
|
24 nov. 2024 |
| CVE-2024-8929 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the…
|
5.8
Moyenne
|
22 nov. 2024 |
| CVE-2024-8932 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critique
|
22 nov. 2024 |
| CVE-2024-9026 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it…
|
3.3
Faible
|
8 oct. 2024 |
| CVE-2024-8927 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, HTTP_REDIRECT_STATUS variable is used…
|
7.5
Élevée
|
8 oct. 2024 |
| CVE-2024-8926 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard…
|
8.1
Élevée
|
8 oct. 2024 |
| CVE-2024-8925 |
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form…
|
3.1
Faible
|
8 oct. 2024 |
| CVE-2024-2408 |
The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default),…
|
5.9
Moyenne
|
9 juin 2024 |
| CVE-2024-4577 |
Exploitée
PHP-CGI OS Command Injection Vulnerability
|
9.8
Critique
|
9 juin 2024 |