CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-109619PHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code Execution | PHP Group · PHP | Exploited | 9.2 | 100% | 2026-10-21 |
| CVE-2026-109618PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash Detection | PHP Group · PHP | Exploited | 9.2 | 100% | 2026-10-21 |
| CVE-2012-1823PHP CGI v5.3.12/5.4.2 Remote Code Execution | PHP · PHP | Exploited | 9.8 | 100% | 2012-05-11 |
| CVE-2024-4577PHP CGI - Argument Injection | PHP Group · PHP | Exploited | 9.8 | 100% | 2024-06-09 |
| CVE-2019-11043PHP-FPM Path Info Buffer Underflow - Remote Code Execution | PHP · PHP | Exploited | 8.7 | 100% | 2019-10-28 |
| CVE-2018-17082Apache2 - Transfer-Encoding Chunked XSS | Php · Php | Public check | – | 4.1% | 2018-09-16 |
| CVE-2018-19518University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/ima… | Php · Php | Likely | – | 96% | 2018-11-25 |
| CVE-2018-7584In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_strea… | Php · Php | Likely | – | 87% | 2018-03-01 |
| CVE-2011-4885PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial o… | Php · Php | Likely | – | 83% | 2011-12-30 |
| CVE-2018-5712An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a… | Php · Php | Likely | – | 80% | 2018-01-16 |
| CVE-2012-2311sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence… | Php · Php | Likely | – | 69% | 2012-05-11 |
| CVE-2005-3390The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass securi… | Php · Php | Likely | – | 66% | 2005-11-01 |
| CVE-2012-2329Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) vi… | Php · Php | Likely | – | 62% | 2012-05-11 |
| CVE-2022-31626mysqlnd/pdo password buffer overflow | PHP Group · PHP | Likely | 7.5 | 58% | 2022-06-16 |
| CVE-2016-3078Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application cr… | Php · Php | Likely | – | 56% | 2016-08-07 |
| CVE-2014-8142Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remot… | Php · Php | Likely | – | 55% | 2014-12-20 |
| CVE-2004-0594The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execut… | Php · Php | Likely | – | 55% | 2004-07-16 |
| CVE-2012-2336sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign)… | Php · Php | Likely | – | 52% | 2012-05-11 |
| CVE-2016-5385PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in… | Php · Php | Likely | – | 50% | 2016-07-19 |
| CVE-2022-31629$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities | PHP Group · PHP | Likely | 6.5 | 50% | 2022-09-28 |
| CVE-2005-3388Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a cr… | Php · Php | Likely | – | 49% | 2005-11-01 |
| CVE-2015-6834Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to… | Php · Php | Likely | – | 47% | 2016-05-16 |
| CVE-2004-0595The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows… | Php · Php | Likely | – | 45% | 2004-07-16 |
| CVE-2015-0231Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remot… | Php · Php | Likely | – | 44% | 2015-01-27 |
| CVE-2015-0273Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code v… | Php · Php | Likely | – | 43% | 2015-03-30 |
| CVE-2012-2386Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service… | Php · Php | Likely | – | 42% | 2012-07-07 |
| CVE-2015-4024Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote att… | Php · Php | Likely | – | 42% | 2015-06-09 |
| CVE-2007-1286Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the ove… | Php · Php | Likely | – | 41% | 2007-03-06 |
| CVE-2015-3329Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to… | Php · Php | Likely | – | 38% | 2015-06-09 |
| CVE-2024-2756__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix | PHP Group · PHP | Likely | 6.5 | 38% | 2024-04-29 |
| CVE-2015-6835The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute… | Php · Php | Likely | – | 36% | 2016-05-16 |
| CVE-2016-3141Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption a… | Php · Php | Likely | – | 36% | 2016-03-31 |
| CVE-2013-6420The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter… | Php · Php | Likely | – | 35% | 2013-12-17 |
| CVE-2012-2335php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code… | Php · Php | Likely | – | 34% | 2012-05-11 |
| CVE-2024-1874Command injection via array-ish $command parameter of proc_open() | PHP Group · PHP | Likely | 9.4 | 33% | 2024-04-29 |
| CVE-2004-0542PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and acces… | Php · Php | Likely | – | 31% | 2004-06-10 |
| CVE-2014-3515The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allo… | Php · Php | Likely | – | 30% | 2014-07-09 |
| CVE-2012-0830The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, relat… | Php · Php | Likely | – | 30% | 2012-02-06 |
| CVE-2014-3669Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to caus… | Php · Php | Likely | – | 29% | 2014-10-29 |
| CVE-2024-5585Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) | PHP Group · PHP | Likely | 7.7 | 29% | 2024-06-09 |
| CVE-2015-2331Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x befo… | Php · Php | Likely | – | 27% | 2015-03-30 |
| CVE-2014-3668Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x… | Php · Php | Likely | – | 27% | 2014-10-29 |
| CVE-2017-16642In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used b… | Php · Php | Likely | – | 26% | 2017-11-07 |
| CVE-2021-21707Special characters break path parsing in XML functions | PHP Group · PHP | Likely | 5.3 | 25% | 2021-11-29 |
| CVE-2002-0081Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a mul… | Php · Php | Likely | – | 24% | 2002-06-25 |
| CVE-2011-1938Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code vi… | Php · Php | Likely | – | 23% | 2011-05-31 |
| CVE-2015-8617Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format str… | Php · Php | Likely | – | 23% | 2016-01-19 |
| CVE-2014-3670The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, w… | Php · Php | Likely | – | 23% | 2014-10-29 |
| CVE-2023-3824Buffer overflow and overread in phar_dir_read() | PHP Group · PHP | Likely | 9.4 | 22% | 2023-08-11 |
| CVE-2006-1490PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode functio… | Php · Php | Likely | – | 21% | 2006-03-29 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.