VulertSecurity VulertSecurity

Vulnerability Database · Search

php vulnerabilities — 51 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
High Heap-use-after-free vulnerability in fuzzer_execute_ex in php php OSS-Fuzz 09 Feb 2024 5752bbdad54a416ac7c5ba810ef808ddc6aea36a
High UNKNOWN WRITE Vulnerability in php php OSS-Fuzz 18 Dec 2023 c67f6f449c4b5501583a91abcd8fea42289e697d
Unrated Global-buffer-overflow in pcre_get_compiled_regex_cache_ex in php php OSS-Fuzz 14 Dec 2023 2b8c00850b86ab40457dcd09a35a8cd9e0c4f9f0
Unrated Global-buffer-overflow in pcre_get_compiled_regex_cache_ex in php php OSS-Fuzz 14 Dec 2023 2b8c00850b86ab40457dcd09a35a8cd9e0c4f9f0
High Heap-use-after-free vulnerability in zend_reference_destroy in php php OSS-Fuzz 01 Dec 2023 1e55c9760178f9d5e1de8b251537b3e8ccf44feb
High UNKNOWN WRITE Vulnerability in php_strip_url_passwd php OSS-Fuzz 16 Nov 2023 d8e866da04ec5883500332b3d31d5a684188463e
Unrated Segv on unknown address in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER in php php OSS-Fuzz 01 Nov 2023 ed37ab9d1418db341121164603db47fee6f1bb9c
High Heap-use-after-free in zend_jit_trace_execute in php php OSS-Fuzz 31 Oct 2023 No fix published
Unrated Segv on unknown address in cleanup_live_vars in php php OSS-Fuzz 27 Oct 2023 No fix published
High Heap-use-after-free in zval_call_destructor in php php OSS-Fuzz 20 Jul 2023 2fbec0974fd6ec89555f37356a8376f680b9bf49
High Heap-use-after-free in zval_call_destructor in php php OSS-Fuzz 19 May 2023 f6563442dbf2e7cae0ae44b70c47f105dab0d4d6
High Heap-use-after-free vulnerability in zend_ast_evaluate_inner in PHP php OSS-Fuzz 17 Feb 2023 1978a7b393ebbf5018e07b42ba65325282eee336
Medium Heap-buffer-overflow in lex_scan in php php OSS-Fuzz 05 Feb 2023 8ad81c0e8c21d904f4d45c165d83925f907489f3
High Heap-use-after-free vulnerability in zend_generator_dtor_storage in php php OSS-Fuzz 31 Jan 2023 e746b89bc90adbfbe708801d516ac46c655ed0e3
High Heap-use-after-free vulnerability in user_wrapper_opendir in php php OSS-Fuzz 08 Sep 2022 09aa27cc0993e321678b6e66a1d3fc428b6e3c59
Medium Heap-buffer-overflow in zim_ReflectionEnumBackedCase_getBackingValue in php php OSS-Fuzz 13 Jul 2022 No fix published
Unrated Segv on unknown address in i_zval_ptr_dtor php OSS-Fuzz 12 Mar 2022 No fix published
Medium Heap-buffer-overflow in zend_gc_collect_cycles in php php OSS-Fuzz 11 Mar 2022 c4ecd82f9399850a36bf2466d0a54a045b6dfa15
High Heap-use-after-free vulnerability in php php OSS-Fuzz 21 Feb 2022 No fix published
High Heap-use-after-free vulnerability in zend_std_get_property_ptr_ptr in php php OSS-Fuzz 24 Jan 2022 f1ae13509f23a639bd47b4035e6bf74c68cef752
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.