Approved changes feed: RSS · Atom

cpe:2.3:a:php:php:5.6.0:*:*:*:*:*:*:*

part: a version: 5.6.0 update: *

VendorPhp (9aec2613-7a27-5ce5-8ac7-140851d8da4c)
ProductPhp (38640b93-5029-5cca-a025-ab7d01c98b51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/php/php-src purl2cpe 2026-06-01 10:17:42.513038

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4543 vulnerable 2026-06-08 05:07:54.796252 Details available
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
Published: 2016-05-22T01:00:00.000Z
Updated: 2024-08-06T00:32:25.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4542 vulnerable 2026-06-08 05:07:54.780994 Details available
The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
Published: 2016-05-22T01:00:00.000Z
Updated: 2024-08-06T00:32:25.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4541 vulnerable 2026-06-08 05:07:54.779887 Details available
The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
Published: 2016-05-22T01:00:00.000Z
Updated: 2024-08-06T00:32:25.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4540 vulnerable 2026-06-08 05:07:54.778653 Details available
The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
Published: 2016-05-22T01:00:00.000Z
Updated: 2024-08-06T00:32:25.654Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4539 vulnerable 2026-06-08 05:07:54.777275 Details available
The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero.
Published: 2016-05-22T01:00:00.000Z
Updated: 2024-08-06T00:32:25.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4538 vulnerable 2026-06-08 05:07:54.775977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4537 vulnerable 2026-06-08 05:07:54.769771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4342 vulnerable 2026-06-08 05:07:47.203572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4073 vulnerable 2026-06-08 05:07:46.656069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3142 vulnerable 2026-06-08 05:07:44.593700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3141 vulnerable 2026-06-08 05:07:44.590451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7804 vulnerable 2026-06-08 05:07:01.966156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6834 vulnerable 2026-06-08 05:06:53.156640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4644 vulnerable 2026-06-08 05:06:40.381472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4642 vulnerable 2026-06-08 05:06:40.371217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4605 vulnerable 2026-06-08 05:06:40.228466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4604 vulnerable 2026-06-08 05:06:40.227156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4603 vulnerable 2026-06-08 05:06:40.225906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4602 vulnerable 2026-06-08 05:06:40.224630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4600 vulnerable 2026-06-08 05:06:40.222827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4599 vulnerable 2026-06-08 05:06:40.221495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4598 vulnerable 2026-06-08 05:06:40.220198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4116 vulnerable 2026-06-08 05:06:39.213171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3412 vulnerable 2026-06-08 05:06:38.246931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3411 vulnerable 2026-06-08 05:06:38.245649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9767 vulnerable 2026-06-08 05:06:13.025741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8142 vulnerable 2026-06-08 05:06:08.090382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3670 vulnerable 2026-06-08 05:05:42.311253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3669 vulnerable 2026-06-08 05:05:42.309101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3668 vulnerable 2026-06-08 05:05:42.306378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.