Vulnerabilities (CVE)

Filtered by vendor Php Subscribe
Total 742 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-1939 3 Debian, Php, Zend 3 Debian Linux, Php, Zend Framework 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.
CVE-2010-4657 3 Debian, Php, Redhat 3 Debian Linux, Php, Enterprise Linux 2024-11-21 5.0 MEDIUM 7.5 HIGH
PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.