Approved changes feed: RSS · Atom

cpe:2.3:a:php:php:5.3.28:*:*:*:*:*:*:*

part: a version: 5.3.28 update: *

VendorPhp (9aec2613-7a27-5ce5-8ac7-140851d8da4c)
ProductPhp (38640b93-5029-5cca-a025-ab7d01c98b51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/php/php-src purl2cpe 2026-06-01 10:17:42.460713

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-7478 vulnerable 2026-06-03 14:36:07.910787 Details available
Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
Published: 2017-01-11T06:02:00.000Z
Updated: 2024-08-06T01:57:47.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9427 vulnerable 2026-06-03 14:34:26.930992 Details available
sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.
Published: 2015-01-03T02:00:00.000Z
Updated: 2024-08-06T13:47:41.005Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.