| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0185)
|
|
|
High
|
|
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-8994)
|
|
|
High
|
|
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-9637)
|
|
|
High
|
|
PHP Release of Invalid Pointer or Reference Vulnerability (CVE-2022-31625)
|
|
|
High
|
|
PHP Resource Management Errors Vulnerability (CVE-2002-2309)
|
|
|
High
|
|
PHP Resource Management Errors Vulnerability (CVE-2007-4660)
|
|
|
High
|
|
PHP Resource Management Errors Vulnerability (CVE-2010-2225)
|
|
|
High
|
|
PHP Resource Management Errors Vulnerability (CVE-2011-1148)
|
|
|
High
|
|
PHP Resource Management Errors Vulnerability (CVE-2012-0830)
|
|
|
High
|
|
PHP Resource Management Errors Vulnerability (CVE-2015-8877)
|
|
|
High
|
|
PHP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-7272)
|
|
|
High
|
|
phpThumb() fltr[] parameter command injection vulnerability
|
|
|
High
|
|
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2011-3336)
|
|
|
High
|
|
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2017-11142)
|
|
|
High
|
|
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2023-0662)
|
|
|
High
|
|
PHPUnit Remote Code Execution
|
|
|
High
|
|
PHP Use After Free Vulnerability (CVE-2015-1351)
|
|
|
High
|
|
PHP Use After Free Vulnerability (CVE-2015-6831)
|
|
|
High
|
|
PHP Use After Free Vulnerability (CVE-2017-12934)
|
|
|
High
|
|
PHP Use After Free Vulnerability (CVE-2024-11235)
|
|
|
High
|
|
PHP Use of Externally-Controlled Format String Vulnerability (CVE-2011-1153)
|
|
|
High
|
|
PHP Use of Uninitialized Resource Vulnerability (CVE-2015-3414)
|
|
|
High
|
|
Phusion Passenger Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2018-12029)
|
|
|
High
|
|
Phusion Passenger Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-12027)
|
|
|
High
|
|
Phusion Passenger Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-12028)
|
|
|
High
|
|
Phusion Passenger Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-10345)
|
|
|
High
|
|
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-1468)
|
|
|
High
|
|
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10678)
|
|
|
High
|
|
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10680)
|
|
|
High
|
|
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10681)
|
|
|
High
|
|
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-17774)
|
|
|
High
|
|
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-17827)
|
|
|
High
|
|
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-48311)
|
|
|
High
|
|
Piwigo Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-26267)
|
|
|
High
|
|
Piwigo Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10679)
|
|
|
High
|
|
Piwigo Improper Access Control Vulnerability (CVE-2016-10084)
|
|
|
High
|
|
Piwigo Improper Access Control Vulnerability (CVE-2016-10085)
|
|
|
High
|
|
Piwigo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2012-2208)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-40553)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2933)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-9115)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-1441)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19215)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19216)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19217)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27973)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-40313)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-40317)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-26266)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-32297)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-26876)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-27233)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-37270)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-27834)
|
|
|
High
|
|
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-27885)
|
|
|
High
|
|
Piwigo Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2016-3735)
|
|
|
High
|
|
Piwigo Missing Authorization Vulnerability (CVE-2026-27833)
|
|
|
High
|
|
Piwigo Use of Insufficiently Random Values Vulnerability (CVE-2024-48928)
|
|
|
High
|
|
Piwigo Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2025-62406)
|
|
|
High
|
|
Play Framework Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2022-31023)
|
|
|
High
|
|
Play Framework Improper Input Validation Vulnerability (CVE-2015-2156)
|
|
|
High
|
|
Play Framework Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-13864)
|
|
|
High
|
|
Play Framework Inadequate Encryption Strength Vulnerability (CVE-2019-17598)
|
|
|
High
|
|
Play Framework Out-of-bounds Write Vulnerability (CVE-2020-27196)
|
|
|
High
|
|
Play Framework Uncontrolled Recursion Vulnerability (CVE-2020-26882)
|
|
|
High
|
|
Play Framework Uncontrolled Recursion Vulnerability (CVE-2020-26883)
|
|
|
High
|
|
Play Framework Uncontrolled Resource Consumption Vulnerability (CVE-2022-31018)
|
|
|
High
|
|
PleskLin Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-43784)
|
|
|
High
|
|
PleskLin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1557)
|
|
|
High
|
|
PleskLin Other Vulnerability (CVE-2013-0133)
|
|
|
High
|
|
PleskLin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4878)
|
|
|
High
|
|
PleskWin Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-43784)
|
|
|
High
|
|
PleskWin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1557)
|
|
|
High
|
|
PleskWin Other Vulnerability (CVE-2013-0133)
|
|
|
High
|
|
PleskWin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4878)
|
|
|
High
|
