| CVE-2026-109619 |
Exploitée
RCE via stale global state
|
9.2
Critique
|
21 oct. 2026 |
| CVE-2026-109618 |
Exploitée
RCE via OOM corruption
|
9.2
Critique
|
21 oct. 2026 |
| CVE-2026-6722 |
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP…
|
9.5
Critique
|
10 mai 2026 |
| CVE-2024-11235 |
In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and…
|
9.2
Critique
|
4 avr. 2025 |
| CVE-2022-31631 |
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote…
|
9.1
Critique
|
12 févr. 2025 |
| CVE-2024-11236 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critique
|
24 nov. 2024 |
| CVE-2024-8932 |
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to…
|
9.8
Critique
|
22 nov. 2024 |
| CVE-2024-4577 |
Exploitée
PHP-CGI OS Command Injection Vulnerability
|
9.8
Critique
|
9 juin 2024 |
| CVE-2024-1874 |
In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with…
|
9.4
Critique
|
29 avr. 2024 |
| CVE-2023-3824 |
In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while…
|
9.4
Critique
|
11 août 2023 |