Approved changes feed: RSS · Atom
cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:*
part: a version: 5.4.9 update: *
| Vendor | Php (9aec2613-7a27-5ce5-8ac7-140851d8da4c) |
|---|---|
| Product | Php (38640b93-5029-5cca-a025-ab7d01c98b51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/php/php-src |
purl2cpe | 2026-06-01 10:17:42.512844 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-7478 |
vulnerable | 2026-06-08 05:08:12.861116 |
Details available
Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
Published: 2017-01-11T06:02:00.000Z
Updated: 2024-08-06T01:57:47.681Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0232 |
vulnerable | 2026-06-08 05:06:14.006194 |
Details available
The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.
Published: 2015-01-27T11:00:00.000Z
Updated: 2024-08-06T04:03:10.640Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0231 |
vulnerable | 2026-06-08 05:06:14.003807 |
Details available
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.
Published: 2015-01-27T11:00:00.000Z
Updated: 2024-08-06T04:03:10.576Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9912 |
vulnerable | 2026-06-08 05:06:13.154460 |
Details available
The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a locale_get_display_name call with a long first argument.
Published: 2017-01-04T20:00:00.000Z
Updated: 2024-08-06T14:02:36.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5120 |
vulnerable | 2026-06-08 05:05:47.005060 |
Details available
gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.
Published: 2014-08-23T01:00:00.000Z
Updated: 2024-08-06T11:34:37.424Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3670 |
vulnerable | 2026-06-08 05:05:42.310307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3669 |
vulnerable | 2026-06-08 05:05:42.308123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3668 |
vulnerable | 2026-06-08 05:05:42.276327 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3597 |
vulnerable | 2026-06-08 05:05:33.673344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3587 |
vulnerable | 2026-06-08 05:05:33.622592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3478 |
vulnerable | 2026-06-08 05:05:32.860731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6420 |
vulnerable | 2026-06-08 05:04:56.635941 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4636 |
vulnerable | 2026-06-08 05:04:48.901539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4635 |
vulnerable | 2026-06-08 05:04:48.897632 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4248 |
vulnerable | 2026-06-08 05:04:34.926561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3735 |
vulnerable | 2026-06-08 05:04:32.741899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2110 |
vulnerable | 2026-06-08 05:03:58.370928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1643 |
vulnerable | 2026-06-08 05:03:55.298109 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1635 |
vulnerable | 2026-06-08 05:03:55.250011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1171 |
vulnerable | 2026-06-08 05:00:47.965331 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4718 |
vulnerable | 2026-06-08 04:59:32.875778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.