Known Vulnerabilities for products from Php
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Php".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109619 json | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctl... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-109618 json | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some context... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-17543 json | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from ... | Not Provided | 2026-07-30 | 2026-08-05 |
| CVE-2026-14355 json | In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm... | Not Provided | 2026-07-03 | 2026-07-08 |
| CVE-2026-7568 json | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() functi... | Not Provided | 2026-05-10 | 2026-07-24 |
| CVE-2026-7263 json | In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly, cau... | Not Provided | 2026-05-10 | 2026-07-24 |
| CVE-2026-7262 json | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has... | Not Provided | 2026-05-10 | 2026-07-24 |
| CVE-2026-7261 json | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is con... | Not Provided | 2026-05-10 | 2026-07-24 |
| CVE-2026-7260 json | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP proce... | Not Provided | 2026-07-30 | 2026-08-05 |
| CVE-2026-7259 json | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between enc... | Not Provided | 2026-05-10 | 2026-07-24 |
| CVE-2026-7258 json | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, includ... | Not Provided | 2026-05-10 | 2026-07-24 |
| CVE-2026-6735 json | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation... | Not Provided | 2026-05-10 | 2026-07-24 |
| CVE-2026-6722 json | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's o... | Not Provided | 2026-05-10 | 2026-07-24 |
| CVE-2026-6104 json | In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is passed t... | Not Provided | 2026-05-10 | 2026-07-24 |
| CVE-2025-14180 json | In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when u... | Not Provided | 2025-12-27 | 2026-10-13 |
| CVE-2025-14179 json | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird drive... | Not Provided | 2026-05-10 | 2026-07-25 |
| CVE-2025-14178 json | In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a hea... | Not Provided | 2025-12-27 | 2026-10-13 |
| CVE-2025-14177 json | In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the g... | Not Provided | 2025-12-27 | 2026-10-13 |
| CVE-2023-3824 json | In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR... | 9.8 - CRITICAL | 2023-08-11 | 2023-10-27 |
| CVE-2023-3823 json | In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global ... | 7.5 - HIGH | 2023-08-11 | 2023-10-27 |
Known software with vulnerabilities from Php
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Php | Animated Smiley Generator | - |
| Application | Php | Archive Tar | 1.3.11 |
| Application | Php | Ar Memberscript | - |
| Application | Php | Blog Cms | - |
| Application | Php | Bloq | - |
| Application | Php | Comoblog | - |
| Application | Php | Com Extensions | - |
| Application | Php | Cvs | - |
| Application | Php | Directory Listing Script | - |
| Application | Php | Dirlist | - |
| Application | Php | Easymoblog | - |
| Application | Php | Errordocs | - |
| Application | Php | Ext-http | - |
| Application | Php | F1 Maxs File Uploader | - |
| Application | Php | Go-pear.php | - |
| Application | Php | Imagick | 3.3.0 |
| Application | Php | Mysql Banner Exchange | - |
| Application | Php | Mysql Extension | - |
| Application | Php | Pear | - |
| Application | Php | Pear Archive Tar | 0.10 |