PHP 5.4.14 release candidate 1
Approved changes feed: RSS · Atom
cpe:2.3:a:php:php:5.4.14:rc1:*:*:*:*:*:*
part: a version: 5.4.14 update: rc1
| Vendor | Php (9aec2613-7a27-5ce5-8ac7-140851d8da4c) |
|---|---|
| Product | Php (38640b93-5029-5cca-a025-ab7d01c98b51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/php/php-src |
purl2cpe | 2026-06-01 10:17:42.512682 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-7478 |
vulnerable | 2026-06-08 05:08:12.866240 |
Details available
Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
Published: 2017-01-11T06:02:00.000Z
Updated: 2024-08-06T01:57:47.681Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0232 |
vulnerable | 2026-06-08 05:06:14.006335 |
Details available
The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.
Published: 2015-01-27T11:00:00.000Z
Updated: 2024-08-06T04:03:10.640Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0231 |
vulnerable | 2026-06-08 05:06:14.003956 |
Details available
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.
Published: 2015-01-27T11:00:00.000Z
Updated: 2024-08-06T04:03:10.576Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9912 |
vulnerable | 2026-06-08 05:06:13.154655 |
Details available
The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a locale_get_display_name call with a long first argument.
Published: 2017-01-04T20:00:00.000Z
Updated: 2024-08-06T14:02:36.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9427 |
vulnerable | 2026-06-08 05:06:11.727175 |
Details available
sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.
Published: 2015-01-03T02:00:00.000Z
Updated: 2024-08-06T13:47:41.005Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5120 |
vulnerable | 2026-06-08 05:05:47.005245 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3670 |
vulnerable | 2026-06-08 05:05:42.310452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3669 |
vulnerable | 2026-06-08 05:05:42.308280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3668 |
vulnerable | 2026-06-08 05:05:42.280908 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3597 |
vulnerable | 2026-06-08 05:05:33.673498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3587 |
vulnerable | 2026-06-08 05:05:33.622748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3478 |
vulnerable | 2026-06-08 05:05:32.865445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6420 |
vulnerable | 2026-06-08 05:04:56.640851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4248 |
vulnerable | 2026-06-08 05:04:34.926719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3735 |
vulnerable | 2026-06-08 05:04:32.746956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1171 |
vulnerable | 2026-06-08 05:00:47.970195 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4718 |
vulnerable | 2026-06-08 04:59:32.881681 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.