Approved changes feed: RSS · Atom
cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Php Group (92a56395-c1b3-5edb-8b1f-05390af3a68e) |
|---|---|
| Product | Php (35c209c6-ba98-5de5-8cfd-39b8dfcb2e71) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-109618 |
vulnerable | 2026-11-03 10:17:39.585653 |
RCE via OOM corruption
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
Published: 2026-10-21T13:48:34.845Z
Updated: 2026-11-05T18:17:38.313Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-109619 |
vulnerable | 2026-11-03 10:17:39.472089 |
RCE via stale global state
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
Published: 2026-10-21T13:54:43.866Z
Updated: 2026-11-05T18:17:39.997Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7260 |
vulnerable | 2026-09-16 04:34:10.800490 |
Stack overflow in phar with circular symlinks
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
Published: 2026-07-30T11:22:53.918Z
Updated: 2026-07-30T12:15:22.862Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-17544 |
vulnerable | 2026-09-16 04:33:03.999631 |
Out-of-bounds write in bccomp() via crafted operand and scale
Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.
Published: 2026-07-30T11:22:24.023Z
Updated: 2026-07-31T03:55:47.261Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-17543 |
vulnerable | 2026-09-16 04:33:02.992955 |
SQL injection in ext-pgsql via E'...' backslash breakout
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
Published: 2026-07-30T11:22:04.549Z
Updated: 2026-07-31T03:55:46.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7568 |
vulnerable | 2026-06-08 08:08:57.413268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7263 |
vulnerable | 2026-06-08 08:08:56.721705 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7262 |
vulnerable | 2026-06-08 08:08:56.720880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7261 |
vulnerable | 2026-06-08 08:08:56.719916 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7259 |
vulnerable | 2026-06-08 08:08:56.719172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7258 |
vulnerable | 2026-06-08 08:08:56.715713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6735 |
vulnerable | 2026-06-08 08:07:05.022212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6722 |
vulnerable | 2026-06-08 08:07:05.012837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6104 |
vulnerable | 2026-06-08 08:07:04.460062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6491 |
vulnerable | 2026-06-08 07:43:15.152534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1861 |
vulnerable | 2026-06-08 07:08:38.360650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1736 |
vulnerable | 2026-06-08 07:08:37.951161 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1735 |
vulnerable | 2026-06-08 07:08:37.950617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1734 |
vulnerable | 2026-06-08 07:08:37.947589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1220 |
vulnerable | 2026-06-08 07:06:37.166508 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1219 |
vulnerable | 2026-06-08 07:06:37.166004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1217 |
vulnerable | 2026-06-08 07:06:37.165464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14180 |
vulnerable | 2026-06-08 07:06:33.804356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14179 |
vulnerable | 2026-06-08 07:06:33.803833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14178 |
vulnerable | 2026-06-08 07:06:33.803168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14177 |
vulnerable | 2026-06-08 07:06:33.799589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9026 |
vulnerable | 2026-06-08 07:00:26.499504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8932 |
vulnerable | 2026-06-08 07:00:26.146792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8929 |
vulnerable | 2026-06-08 07:00:26.146243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8927 |
vulnerable | 2026-06-08 07:00:26.145718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8926 |
vulnerable | 2026-06-08 07:00:26.145025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8925 |
vulnerable | 2026-06-08 07:00:26.143230 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5585 |
vulnerable | 2026-06-08 06:56:16.619525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5458 |
vulnerable | 2026-06-08 06:56:16.079306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4577 |
vulnerable | 2026-06-08 06:50:18.197597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3096 |
vulnerable | 2026-06-08 06:41:52.397419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2757 |
vulnerable | 2026-06-08 06:35:27.274480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2756 |
vulnerable | 2026-06-08 06:35:27.274011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2408 |
vulnerable | 2026-06-08 06:33:31.044468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1874 |
vulnerable | 2026-06-08 06:27:14.796315 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11236 |
vulnerable | 2026-06-08 06:23:49.139381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11235 |
vulnerable | 2026-06-08 06:23:49.138608 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11234 |
vulnerable | 2026-06-08 06:23:49.138108 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11233 |
vulnerable | 2026-06-08 06:23:49.135280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3824 |
vulnerable | 2026-06-08 06:09:40.655053 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3823 |
vulnerable | 2026-06-08 06:09:40.654382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3247 |
vulnerable | 2026-06-08 06:09:38.932003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0662 |
vulnerable | 2026-06-08 05:52:32.224317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0568 |
vulnerable | 2026-06-08 05:52:31.938198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0567 |
vulnerable | 2026-06-08 05:52:31.936795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31631 |
vulnerable | 2026-06-08 05:43:41.212307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31630 |
vulnerable | 2026-06-08 05:43:41.211975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31629 |
vulnerable | 2026-06-08 05:43:41.211521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31628 |
vulnerable | 2026-06-08 05:43:41.210214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31627 |
vulnerable | 2026-06-08 05:43:41.209520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31626 |
vulnerable | 2026-06-08 05:43:41.209098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31625 |
vulnerable | 2026-06-08 05:43:41.207167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21708 |
vulnerable | 2026-06-08 05:29:13.152269 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21707 |
vulnerable | 2026-06-08 05:29:13.151788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21706 |
vulnerable | 2026-06-08 05:29:13.151290 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21705 |
vulnerable | 2026-06-08 05:29:13.147648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21704 |
vulnerable | 2026-06-08 05:29:13.147176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21703 |
vulnerable | 2026-06-08 05:29:13.146499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21702 |
vulnerable | 2026-06-08 05:29:13.142786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7071 |
vulnerable | 2026-06-08 05:27:11.892701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7070 |
vulnerable | 2026-06-08 05:27:11.891239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7069 |
vulnerable | 2026-06-08 05:27:11.884038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7068 |
vulnerable | 2026-06-08 05:27:11.881868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7067 |
vulnerable | 2026-06-08 05:27:11.881090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7066 |
vulnerable | 2026-06-08 05:27:11.877368 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7065 |
vulnerable | 2026-06-08 05:27:11.876298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7064 |
vulnerable | 2026-06-08 05:27:11.871016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7063 |
vulnerable | 2026-06-08 05:27:11.869904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7062 |
vulnerable | 2026-06-08 05:27:11.863205 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7061 |
vulnerable | 2026-06-08 05:27:11.862580 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7060 |
vulnerable | 2026-06-08 05:27:11.861853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7059 |
vulnerable | 2026-06-08 05:27:11.857335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11050 |
vulnerable | 2026-06-08 05:12:26.319589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11049 |
vulnerable | 2026-06-08 05:12:26.318491 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11048 |
vulnerable | 2026-06-08 05:12:26.317842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11047 |
vulnerable | 2026-06-08 05:12:26.316837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11046 |
vulnerable | 2026-06-08 05:12:26.315546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11045 |
vulnerable | 2026-06-08 05:12:26.313918 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11044 |
vulnerable | 2026-06-08 05:12:26.308528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11042 |
vulnerable | 2026-06-08 05:12:26.287728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11041 |
vulnerable | 2026-06-08 05:12:26.279735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11040 |
vulnerable | 2026-06-08 05:12:26.278496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11039 |
vulnerable | 2026-06-08 05:12:26.271547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11038 |
vulnerable | 2026-06-08 05:12:26.257782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11036 |
vulnerable | 2026-06-08 05:12:26.246194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11035 |
vulnerable | 2026-06-08 05:12:26.244516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11034 |
vulnerable | 2026-06-08 05:12:26.241840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3018 |
vulnerable | 2026-06-08 04:49:08.099752 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3016 |
vulnerable | 2026-06-08 04:49:08.081330 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.