PHP 5.5.17
Approved changes feed: RSS · Atom
cpe:2.3:a:php:php:5.5.17:*:*:*:*:*:*:*
part: a version: 5.5.17 update: *
| Vendor | Php (9aec2613-7a27-5ce5-8ac7-140851d8da4c) |
|---|---|
| Product | Php (38640b93-5029-5cca-a025-ab7d01c98b51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/php/php-src |
purl2cpe | 2026-06-01 10:17:42.512917 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-4072 |
vulnerable | 2026-06-08 05:07:46.654231 |
Details available
The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.
Published: 2016-05-20T10:00:00.000Z
Updated: 2024-08-06T00:17:30.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4071 |
vulnerable | 2026-06-08 05:07:46.642244 |
Details available
Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.
Published: 2016-05-20T10:00:00.000Z
Updated: 2024-08-06T00:17:30.969Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3185 |
vulnerable | 2026-06-08 05:07:44.967217 |
Details available
The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.
Published: 2016-05-16T10:00:00.000Z
Updated: 2024-08-05T23:47:58.047Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8838 |
vulnerable | 2026-06-08 05:07:05.027783 |
Details available
ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.
Published: 2016-05-16T10:00:00.000Z
Updated: 2024-08-06T08:29:22.085Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8835 |
vulnerable | 2026-06-08 05:07:05.018163 |
Details available
The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application crash) or possibly execute arbitrary code via crafted serialized data representing a numerically indexed _cookies array, related to the SoapClient::__call method in ext/soap/soap.c.
Published: 2016-05-16T10:00:00.000Z
Updated: 2024-08-06T08:29:22.102Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6838 |
vulnerable | 2026-06-08 05:06:53.165332 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6837 |
vulnerable | 2026-06-08 05:06:53.163609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6835 |
vulnerable | 2026-06-08 05:06:53.160205 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6834 |
vulnerable | 2026-06-08 05:06:53.147719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5589 |
vulnerable | 2026-06-08 05:06:50.500144 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4644 |
vulnerable | 2026-06-08 05:06:40.381327 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4642 |
vulnerable | 2026-06-08 05:06:40.371063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4605 |
vulnerable | 2026-06-08 05:06:40.228356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4604 |
vulnerable | 2026-06-08 05:06:40.227043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4603 |
vulnerable | 2026-06-08 05:06:40.225794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4602 |
vulnerable | 2026-06-08 05:06:40.224513 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4600 |
vulnerable | 2026-06-08 05:06:40.222715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4599 |
vulnerable | 2026-06-08 05:06:40.221381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4598 |
vulnerable | 2026-06-08 05:06:40.216020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3412 |
vulnerable | 2026-06-08 05:06:38.246817 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3411 |
vulnerable | 2026-06-08 05:06:38.239731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2787 |
vulnerable | 2026-06-08 05:06:35.819242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2348 |
vulnerable | 2026-06-08 05:06:34.882395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2331 |
vulnerable | 2026-06-08 05:06:34.817689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0273 |
vulnerable | 2026-06-08 05:06:14.192784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0232 |
vulnerable | 2026-06-08 05:06:14.007165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0231 |
vulnerable | 2026-06-08 05:06:14.004855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9705 |
vulnerable | 2026-06-08 05:06:12.544071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9653 |
vulnerable | 2026-06-08 05:06:12.360979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9652 |
vulnerable | 2026-06-08 05:06:12.359189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8142 |
vulnerable | 2026-06-08 05:06:08.088871 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3670 |
vulnerable | 2026-06-08 05:05:42.311237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3669 |
vulnerable | 2026-06-08 05:05:42.309085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3668 |
vulnerable | 2026-06-08 05:05:42.305855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.