Exposure of PHP

Programming languages
1,137
exposure score
4,221,648
sites use
4
exploited
55
critical

CVEs

1,223 results
CVE-2026-109618CRITICALRCE via OOM corruptionEPSS 100.0%KEVCVE-2026-109619CRITICALRCE via stale global stateEPSS 100.0%KEVCVE-2024-4577CRITICALArgument Injection in PHP-CGIEPSS 100.0%KEVCVE-2019-11043HIGHUnderflow in PHP-FPM can lead to RCEEPSS 99.8%KEVCVE-2024-2653HIGHCVE-2024-2653EPSS 80.3%CVE-2022-31626HIGHmysqlnd/pdo password buffer overflowEPSS 58.1%CVE-2022-31629MEDIUM$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilitiesEPSS 49.6%CVE-2023-0562HIGHPHPGurukul Bank Locker Management System Login index.php sql injectionEPSS 44.3%CVE-2024-2756MEDIUM__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fixEPSS 38.1%CVE-2023-0563LOWPHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scriptingEPSS 37.6%CVE-2023-0678HIGHMissing Authorization in phpipam/phpipamEPSS 37.3%CVE-2024-1874CRITICALCommand injection via array-ish $command parameter of proc_open()EPSS 32.8%CVE-2024-5585HIGHCommand injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)EPSS 28.8%CVE-2021-21707MEDIUMSpecial characters break path parsing in XML functionsEPSS 25.3%CVE-2023-3824CRITICALBuffer overflow and overread in phar_dir_read()EPSS 21.8%CVE-2024-5458MEDIUMFilter bypass in filter_var (FILTER_VALIDATE_URL)EPSS 12.1%CVE-2020-7060MEDIUMglobal buffer-overflow in mbfl_filt_conv_big5_wcharEPSS 8.9%CVE-2019-11045LOWDirectoryIterator class silently truncates after a null byteEPSS 8.8%CVE-2023-4113MEDIUMPHP Jabbers Service Booking Script index.php cross site scriptingEPSS 8.4%CVE-2023-4115MEDIUMPHP Jabbers Cleaning Business index.php cross site scriptingEPSS 8.4%