VulertSecurity VulertSecurity

Vulnerability Database · Search

Vulnerabilities matching "php" — 4,117 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
8.1 high RLSA-2026:87073: PHP security update addresses denial of service and memory safety flaws libzip Rocky Linux 22 Oct 2026 0:1.7.3-1.module+el8.10.0+1605+02e07af7
Critical CVE-2026-109619: Stale PHP global state can enable remote code execution php-min Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109618: Out-of-memory handling can enable remote code execution in php-min php-min Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109619: PHP stale global state can enable remote code execution php Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109618: PHP out-of-memory handling can enable remote code execution php Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109619: Remote code execution in Bitnami libphp libphp Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109618: Out-of-memory corruption in libphp can enable remote code execution libphp Bitnami 22 Oct 2026 8.2.35
8.1 high Critical Security Update for PHP 8.4: Addressing Denial of Service and Memory Corruption Vulnerabilities php8.4 Rocky Linux 22 Oct 2026 0:8.4.27-1.el10_2
8.1 high Critical Security Flaw in PHP: Denial of Service and Remote Code Execution Vulnerabilities php Rocky Linux 22 Oct 2026 0:8.3.36-1.el10_2
8.1 high Critical Security Update for PHP: Denial of Service and Remote Code Execution Vulnerabilities php Rocky Linux 22 Oct 2026 0:8.3.36-1.module+el9.8.0+40396+4e680bb7
8.1 high Critical Security Flaw in PHP Package: Denial of Service and Remote Code Execution Vulnerabilities php Rocky Linux 22 Oct 2026 0:8.2.35-1.module+el9.8.0+40395+2f706e64
8.1 high Critical PHP Vulnerability: Denial of Service and Remote Code Execution Risks php Rocky Linux 22 Oct 2026 0:8.0.30-8.el9_8.1
8.1 high Critical Security Update for PHP 7.4: Multiple Vulnerabilities Addressed libzip Rocky Linux 22 Oct 2026 0:1.6.1-1.module+el8.10.0+1912+72767185
Unrated CVE-2026-114573: Drupal Monster Menus PHP Object Injection Vulnerability drupal/monster_menus Packagist 21 Oct 2026 9.5.6
Unrated CVE-2026-114524: Drupal Custom Formatters Module Arbitrary PHP Execution Vulnerability drupal/custom_formatters Packagist 21 Oct 2026 4.2.1
Unrated Critical Vulnerability in PHP 8.2 and 8.4: CVE-2026-109618 php8.2 Debian 21 Oct 2026 8.2.35-1~deb12u1
Unrated Critical Vulnerability in PHP 8.2 and 8.4 Packages: CVE-2026-109619 php8.2 Debian 21 Oct 2026 8.2.35-1~deb12u1
Unrated ALSA-2026:87071: PHP 8.4 security update addresses parser and memory flaws php8.4 AlmaLinux 21 Oct 2026 8.4.27-1.el10_2
Unrated ALSA-2026:87079: PHP security update addresses denial of service and memory safety flaws apcu-panel AlmaLinux 21 Oct 2026 5.1.23-1.module_el9.6.0+151+5f31e576
Unrated ALSA-2026:87072: AlmaLinux 9 PHP security update addresses multiple flaws apcu-panel AlmaLinux 21 Oct 2026 5.1.23-1.module_el9.4.0+65+49ff6472

Showing the first 200 matches. Add filters to narrow the results.

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.