Approved changes feed: RSS · Atom

cpe:2.3:a:php:php:5.5.16:*:*:*:*:*:*:*

part: a version: 5.5.16 update: *

VendorPhp (9aec2613-7a27-5ce5-8ac7-140851d8da4c)
ProductPhp (38640b93-5029-5cca-a025-ab7d01c98b51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/php/php-src purl2cpe 2026-06-01 10:17:42.512912

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4072 vulnerable 2026-06-08 05:07:46.654214 Details available
The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.
Published: 2016-05-20T10:00:00.000Z
Updated: 2024-08-06T00:17:30.790Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4071 vulnerable 2026-06-08 05:07:46.642226 Details available
Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.
Published: 2016-05-20T10:00:00.000Z
Updated: 2024-08-06T00:17:30.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3185 vulnerable 2026-06-08 05:07:44.966486 Details available
The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.
Published: 2016-05-16T10:00:00.000Z
Updated: 2024-08-05T23:47:58.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8838 vulnerable 2026-06-08 05:07:05.027767 Details available
ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.
Published: 2016-05-16T10:00:00.000Z
Updated: 2024-08-06T08:29:22.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8835 vulnerable 2026-06-08 05:07:05.017650 Details available
The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application crash) or possibly execute arbitrary code via crafted serialized data representing a numerically indexed _cookies array, related to the SoapClient::__call method in ext/soap/soap.c.
Published: 2016-05-16T10:00:00.000Z
Updated: 2024-08-06T08:29:22.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6838 vulnerable 2026-06-08 05:06:53.165316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6837 vulnerable 2026-06-08 05:06:53.163591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6835 vulnerable 2026-06-08 05:06:53.160189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6834 vulnerable 2026-06-08 05:06:53.147702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5589 vulnerable 2026-06-08 05:06:50.499668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4644 vulnerable 2026-06-08 05:06:40.381311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4642 vulnerable 2026-06-08 05:06:40.371045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4605 vulnerable 2026-06-08 05:06:40.228340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4604 vulnerable 2026-06-08 05:06:40.227028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4603 vulnerable 2026-06-08 05:06:40.225778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4602 vulnerable 2026-06-08 05:06:40.224495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4600 vulnerable 2026-06-08 05:06:40.222698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4599 vulnerable 2026-06-08 05:06:40.221365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4598 vulnerable 2026-06-08 05:06:40.215993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3412 vulnerable 2026-06-08 05:06:38.246799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3411 vulnerable 2026-06-08 05:06:38.239713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2787 vulnerable 2026-06-08 05:06:35.819224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2348 vulnerable 2026-06-08 05:06:34.882376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2331 vulnerable 2026-06-08 05:06:34.817163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0273 vulnerable 2026-06-08 05:06:14.192768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0232 vulnerable 2026-06-08 05:06:14.007143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0231 vulnerable 2026-06-08 05:06:14.004837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9705 vulnerable 2026-06-08 05:06:12.544048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9653 vulnerable 2026-06-08 05:06:12.360963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9652 vulnerable 2026-06-08 05:06:12.359171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8142 vulnerable 2026-06-08 05:06:08.088394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3670 vulnerable 2026-06-08 05:05:42.311221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3669 vulnerable 2026-06-08 05:05:42.309067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3668 vulnerable 2026-06-08 05:05:42.305314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.