Approved changes feed: RSS · Atom

cpe:2.3:a:php:php:5.5.15:*:*:*:*:*:*:*

part: a version: 5.5.15 update: *

VendorPhp (9aec2613-7a27-5ce5-8ac7-140851d8da4c)
ProductPhp (38640b93-5029-5cca-a025-ab7d01c98b51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/php/php-src purl2cpe 2026-06-01 10:17:42.512906

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4072 vulnerable 2026-06-08 05:07:46.654198 Details available
The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.
Published: 2016-05-20T10:00:00.000Z
Updated: 2024-08-06T00:17:30.790Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4071 vulnerable 2026-06-08 05:07:46.642210 Details available
Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.
Published: 2016-05-20T10:00:00.000Z
Updated: 2024-08-06T00:17:30.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3185 vulnerable 2026-06-08 05:07:44.965912 Details available
The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.
Published: 2016-05-16T10:00:00.000Z
Updated: 2024-08-05T23:47:58.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8838 vulnerable 2026-06-08 05:07:05.027751 Details available
ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.
Published: 2016-05-16T10:00:00.000Z
Updated: 2024-08-06T08:29:22.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8835 vulnerable 2026-06-08 05:07:05.017116 Details available
The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application crash) or possibly execute arbitrary code via crafted serialized data representing a numerically indexed _cookies array, related to the SoapClient::__call method in ext/soap/soap.c.
Published: 2016-05-16T10:00:00.000Z
Updated: 2024-08-06T08:29:22.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6838 vulnerable 2026-06-08 05:06:53.165299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6837 vulnerable 2026-06-08 05:06:53.163574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6835 vulnerable 2026-06-08 05:06:53.160173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6834 vulnerable 2026-06-08 05:06:53.147685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5589 vulnerable 2026-06-08 05:06:50.499144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4644 vulnerable 2026-06-08 05:06:40.381295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4642 vulnerable 2026-06-08 05:06:40.371029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4605 vulnerable 2026-06-08 05:06:40.228325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4604 vulnerable 2026-06-08 05:06:40.227012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4603 vulnerable 2026-06-08 05:06:40.225763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4602 vulnerable 2026-06-08 05:06:40.224479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4600 vulnerable 2026-06-08 05:06:40.222682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4599 vulnerable 2026-06-08 05:06:40.221350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4598 vulnerable 2026-06-08 05:06:40.215846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3412 vulnerable 2026-06-08 05:06:38.246782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3411 vulnerable 2026-06-08 05:06:38.239695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2787 vulnerable 2026-06-08 05:06:35.819207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2348 vulnerable 2026-06-08 05:06:34.882360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2331 vulnerable 2026-06-08 05:06:34.816680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0273 vulnerable 2026-06-08 05:06:14.192752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0232 vulnerable 2026-06-08 05:06:14.007127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0231 vulnerable 2026-06-08 05:06:14.004821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9705 vulnerable 2026-06-08 05:06:12.544026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9653 vulnerable 2026-06-08 05:06:12.360946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9652 vulnerable 2026-06-08 05:06:12.359150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8142 vulnerable 2026-06-08 05:06:08.087872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5120 vulnerable 2026-06-08 05:05:47.008821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3670 vulnerable 2026-06-08 05:05:42.311205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3669 vulnerable 2026-06-08 05:05:42.309049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3668 vulnerable 2026-06-08 05:05:42.304811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3597 vulnerable 2026-06-08 05:05:33.674371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3587 vulnerable 2026-06-08 05:05:33.631956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.