vulnwire

All · PHP

Newest first. Every filter here is also a feed: see the subscribe box.

  1. 8.1high
    CVE-2026-109619RCE via stale global state
    KEVPHPPalo Alto PAN-OS
    16 d ago
  2. 9.8crit
    CVE-2026-109618RCE via OOM corruption
    KEV1 exploitPHPPalo Alto PAN-OS
    16 d ago
  3. 5.9med
    CVE-2026-92842OOB read / info leak in convert.* stream filters when line-break-chars contains NUL
    PHP
    42 d ago
  4. 6.5med
    CVE-2026-91768IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)
    PHP
    42 d ago
  5. 4.3med
    CVE-2026-91769TLS Hostname Verification Falls Back to CN After SAN Mismatch
    PHP
    42 d ago
  6. 6.5med
    CVE-2026-91767Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
    PHP
    42 d ago
  7. 3.4low
    CVE-2025-1218Various packet overreads in mysqlnd_writeprotocol.c
    PHP
    42 d ago
  8. 5.9med
    CVE-2026-91766Cross-origin credential leak in HTTP stream wrapper redirects
    PHP
    42 d ago
  9. 7.5high
    CVE-2026-91765SOAP: Unbounded Recursion in Server-Side cleanup_xml_node
    PHP
    42 d ago
  10. 6.5med
    CVE-2025-14181Integer overflow to buffer overflow in soap HTTP parsing
    PHP
    42 d ago
  11. 7.5high
    CVE-2026-17545PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS
    PHP
    42 d ago
  12. 4.3med
    CVE-2026-6103Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
    PHP
    42 d ago
  13. 5.8med
    CVE-2026-93682Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
    PHP
    42 d ago
  14. 5.5med
    CVE-2026-7260Stack overflow in phar with circular symlinks
    PHP
    3 mo ago
  15. 9.8crit
    CVE-2026-17544Out-of-bounds write in bccomp() via crafted operand and scale
    PHP
    3 mo ago
  16. 9.8crit
    CVE-2026-17543SQL injection in ext-pgsql via E'...' backslash breakout
    PHP
    3 mo ago
  17. 5.6med
    CVE-2026-14355ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
    PHP
    4 mo ago
  18. 7.5high
    CVE-2026-7263DoS attack via DOMNode::C14N()
    PHP
    5 mo ago
  19. 8.2high
    CVE-2026-6104Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding
    PHP
    5 mo ago
  20. 7.5high
    CVE-2026-7258Out-of-bounds read in urldecode() on NetBSD
    PHP
    5 mo ago
  21. 7.7high
    CVE-2026-6722Use-After-Free in SOAP using Apache map
    PHP
    5 mo ago
  22. 6.5med
    CVE-2026-7259Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    PHP
    5 mo ago
  23. 9.8crit
    CVE-2026-7261SoapServer session-persisted object use-after-free via SOAP header fault
    PHP
    5 mo ago
  24. 7.5high
    CVE-2026-7262NULL pointer dereference in SOAP apache:Map decoder with missing <value>
    PHP
    5 mo ago
  25. 8.1high
    CVE-2025-14179SQL injection in pdo_firebird via NUL bytes in quoted strings
    PHP
    5 mo ago
  26. 7.5high
    CVE-2026-7568Signed integer overflow in metaphone()
    PHP
    5 mo ago
  27. 6.1med
    CVE-2026-6735XSS within PHP-FPM status endpoint
    PHP
    5 mo ago
  28. 7.5high
    CVE-2025-14177Information Leak of Memory in getimagesize
    PHP
    10 mo ago
  29. 6.5med
    CVE-2025-14178Heap buffer overflow in array_merge()
    PHP
    10 mo ago
  30. 7.5high
    CVE-2025-14180NULL Pointer Dereference in PDO quoting
    PHP
    10 mo ago