PHP Group PHP

Name: PHP Group PHP
Brand: PHP Group

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

107critical138high105medium5low

updated 2026-10-27

vulnerabilities (367)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2012-1823US	high7.5OT critical	100.0% (100th)	KEV	no fix	2012-05-11	2 versions
CVE-2024-4577US	critical9.8OT critical	100.0% (100th)	KEV	8.3.8	2024-06-09	6 versions
CVE-2019-11043US	critical9.8OT critical	99.7% (100th)	KEV	no fix	2019-10-28	3 versions
CVE-2026-109619US	high8.1	100.0% (100th)	Exploit	no fix	2026-10-21	4 versions
CVE-2026-109618US	critical9.8	100.0% (100th)	Exploit	no fix	2026-10-21	4 versions
CVE-2018-19518US	high7.5	96.1% (100th)	Exploit	no fix	2018-11-25	5 versions
CVE-2018-7584US	critical9.8	87.3% (100th)	Exploit	no fix	2018-03-01	4 versions
CVE-2011-4885US	medium5.0	83.4% (100th)	Exploit	no fix	2011-12-30	45 versions
CVE-2025-48827US	critical9.8	75.6% (100th)	Exploit	no fix	2025-05-27	≤ 8.1
CVE-2020-8813US	high8.8	74.0% (99th)	Exploit	no fix	2020-02-22	≤ 7.2
CVE-2019-6977US	high8.8	71.5% (99th)	Exploit	no fix	2019-01-27	4 versions
CVE-2012-2311US	high7.5	69.3% (99th)	Exploit	no fix	2012-05-11	99 versions
CVE-2022-31626US	high8.8	58.1% (99th)	Exploit	8.1.7	2022-06-16	6 versions
CVE-2025-48828US	high8.1	57.3% (99th)	Exploit	no fix	2025-05-27	≤ 8.1
CVE-2014-8142US	high7.5	55.1% (99th)	Exploit	no fix	2014-12-20	46 versions
CVE-2012-2336US	medium5.0	50.3% (99th)	Exploit	no fix	2012-05-11	100 versions
CVE-2022-31629US	medium6.5	49.6% (99th)	Exploit	8.1.11	2022-09-28	6 versions
CVE-2015-6834US	critical9.8	46.8% (99th)	Exploit	no fix	2016-05-16	3 versions
CVE-2015-0231US	high7.5	44.4% (99th)	Exploit	no fix	2015-01-27	3 versions
CVE-2015-0273US	high7.5	43.8% (99th)	Exploit	no fix	2015-03-30	3 versions
CVE-2012-2386US	high7.5	42.5% (99th)	Exploit	no fix	2012-07-07	99 versions
CVE-2015-6835US	critical9.8	36.2% (98th)	Exploit	no fix	2016-05-16	3 versions
CVE-2016-3141US	critical9.8	36.0% (98th)	Exploit	no fix	2016-03-31	2 versions
CVE-2013-6420US	high7.5	35.6% (98th)	Exploit	no fix	2013-12-17	29 versions
CVE-2024-1874US	—	32.6% (98th)	Exploit	8.3.5	2024-04-29	6 versions
CVE-2020-11579US	high7.5OT high	26.9% (98th)	Exploit	no fix	2020-09-03	≤ 7.2.16
CVE-2017-16642US	high7.5	26.4% (98th)	Exploit	no fix	2017-11-07	3 versions
CVE-2021-21707US	medium5.3	25.3% (98th)	Exploit	7.3.33	2021-11-29	6 versions
CVE-2015-8617US	critical9.8	22.8% (98th)	Exploit	no fix	2016-01-19	≤ 7.0.1
CVE-2023-3824US	critical9.8	21.8% (98th)	Exploit	8.0.30	2023-08-11	6 versions
CVE-2016-4071US	critical9.8	20.5% (97th)	Exploit	no fix	2016-05-20	3 versions
CVE-2015-4148US	medium5.0	19.8% (97th)	Exploit	no fix	2015-06-09	42 versions
CVE-2011-1092US	high7.5	17.9% (97th)	Exploit	no fix	2011-03-15	100 versions
CVE-2011-0421US	medium4.3	13.5% (96th)	Exploit	no fix	2011-03-20	≤ 5.3.6
CVE-2011-1468US	medium4.3	13.3% (96th)	Exploit	no fix	2011-03-20	100 versions
CVE-2018-5711US	medium5.5	13.2% (96th)	Exploit	no fix	2018-01-16	4 versions
CVE-2011-1467US	medium5.0	12.7% (96th)	Exploit	no fix	2011-03-20	≤ 5.3.6
CVE-2016-6174US	high8.1	12.3% (96th)	Exploit	no fix	2016-07-12	2 versions
CVE-2010-3870US	medium6.8	11.3% (96th)	Exploit	no fix	2010-11-12	≤ 5.3.4
CVE-2012-2688US	high10.0	10.5% (96th)	Exploit	no fix	2012-07-20	100 versions
CVE-2016-5399US	high7.8	9.84% (96th)	Exploit	no fix	2017-04-21	3 versions
CVE-2011-0708US	medium4.3	9.83% (96th)	Exploit	no fix	2011-03-20	100 versions
CVE-2018-10546US	high7.5	9.78% (96th)	Exploit	no fix	2018-04-29	4 versions
CVE-2011-1470US	medium4.3	9.52% (95th)	Exploit	no fix	2011-03-20	100 versions
CVE-2012-0788US	medium5.0	8.64% (95th)	Exploit	no fix	2012-02-14	45 versions
CVE-2012-0789US	medium5.0	7.97% (95th)	Exploit	no fix	2012-02-14	45 versions
CVE-2023-23924US	critical9.8OT high	3.57% (89th)	Exploit	no fix	2023-02-01	≤ 8.0.0
CVE-2022-31630US	high7.1	1.32% (71st)	Exploit	8.0.25	2022-11-14	6 versions
CVE-2025-1219US	medium5.3	0.75% (55th)	Exploit	8.3.19	2025-03-30	8 versions
CVE-2025-14177US	high7.5	0.51% (43rd)	Exploit	8.4.16	2025-12-27	10 versions

showing 50 of 367

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer65 CVEs
CWE-20Improper Input Validation57 CVEs
CWE-125Out-of-bounds Read48 CVEs
CWE-416Use After Free39 CVEs
CWE-476NULL Pointer Dereference26 CVEs
CWE-190Integer Overflow or Wraparound24 CVEs
CWE-189CWE-18920 CVEs
CWE-787Out-of-bounds Write19 CVEs

sources (2)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)358 CVEs
EUEU Vulnerability Database (ENISA)90 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan