Vulnerabilities in PHP Group
104 resultsCVE-2020-7065HIGHmb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_fullEPSS 4.9%CVE-2020-7067HIGHOOB Read in urldecode()EPSS 4.4%CVE-2019-11041MEDIUMheap-buffer-overflow on exif_scan_thumbnail in EXIF extensionEPSS 4.4%CVE-2019-11042MEDIUMheap-buffer-overflow on exif_process_user_comment in EXIF extensionEPSS 4.4%CVE-2019-11035MEDIUMHeap over-read in PHP EXIF extensionEPSS 4.4%CVE-2019-11038LOWUninitialized read in gdImageCreateFromXbmEPSS 4.3%CVE-2020-7064MEDIUMUse-of-uninitialized-value in exifEPSS 4.3%CVE-2019-11049MEDIUMmail() may release string with refcount==1 twiceEPSS 4.2%CVE-2019-11046LOWBuffer underflow in bc_shift_addsubEPSS 4.1%CVE-2019-11034MEDIUMHeap over-read in PHP EXIF extensionEPSS 4.1%CVE-2020-7061MEDIUMheap-buffer-overflow in phar_extract_fileEPSS 4.1%CVE-2019-11040MEDIUMHeap buffer overflow in EXIF extensionEPSS 4.1%CVE-2022-31625HIGHFreeing unallocated memory in php_pgsql_free_params()EPSS 3.8%CVE-2024-8926HIGHPHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)EPSS 3.7%CVE-2020-7062HIGHNull Pointer Dereference in PHP Session Upload ProgressEPSS 3.6%CVE-2021-21702MEDIUMNull Dereference in SoapClientEPSS 3.2%CVE-2019-11039MEDIUMOut-of-bounds read in iconv.cEPSS 3.1%CVE-2021-21708HIGHUAF due to php_filter_float() failingEPSS 3.0%CVE-2020-7071MEDIUMFILTER_VALIDATE_URL accepts URLs with invalid userinfoEPSS 2.9%CVE-2020-7066MEDIUMget_headers() silently truncates after a null byteEPSS 2.7%