PHP Group vulnerabilities
104 CVEs and advisories name PHP Group as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-1220Null byte termination in hostnames
- CVE-2025-6491NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
- CVE-2024-11235Reference counting in php_request_shutdown causes Use-After-Free
- CVE-2025-1861Stream HTTP wrapper truncates redirect location to 1024 bytes
- CVE-2025-1736Stream HTTP wrapper header check might omit basic auth header
- CVE-2025-1734Streams HTTP wrapper does not fail for headers with invalid name and no colon
- CVE-2025-1219libxml streams use wrong content-type header when requesting a redirected resource
- CVE-2025-1217Header parser of http stream wrapper does not handle folded headers
- CVE-2022-31631PDO::quote() may return unquoted string
- CVE-2024-11233Single byte overread with convert.quoted-printable-decode filter
- CVE-2024-11234Configuring a proxy in a stream context might allow for CRLF injection in URIs
- CVE-2024-11236Integer overflow in the firebird and dblib quoters causing OOB writes
- CVE-2024-8929Leak partial content of the heap through heap buffer over-read in mysqlnd
- CVE-2024-8932OOB access in ldap_escape
- CVE-2024-9026PHP-FPM logs from children may be altered
- CVE-2024-8927cgi.force_redirect configuration is bypassable due to the environment variable collision
- CVE-2024-8926PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)
- CVE-2024-8925Erroneous parsing of multipart form data
- CVE-2024-2408PHP is vulnerable to the Marvin Attack
- CVE-2024-4577Argument Injection in PHP-CGI
- CVE-2024-5585Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)
- CVE-2024-5458Filter bypass in filter_var (FILTER_VALIDATE_URL)
- CVE-2024-1874Command injection via array-ish $command parameter of proc_open()
- CVE-2024-2757PHP mb_encode_mimeheader runs endlessly for some inputs
- CVE-2024-3096PHP function password_verify can erroneously return true when argument contains NUL
- CVE-2024-2756__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
- CVE-2023-3824Buffer overflow and overread in phar_dir_read()
- CVE-2023-3823Security issue with external entity loading in XML without enabling it
- CVE-2023-3247Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
- CVE-2023-0568Array overrun in common path resolve code