Your PHP version is affected by quite a few remote arbitrary code execution, remote file renaming, and remote file rewriting bugs that require no authentication and can cause big problems, from performance interruptions and messing with server files to DoS attacks. These are not related to any particular non-default module, but php itself.

Here’s a little list I compiled:
CVE-2015-2301
CVE-2014-9652
CVE-2014-5459
CVE-2014-4698
CVE-2014-4670
CVE-2014-3981

kaspersky 2

nessus 50

openvas 40

mageia 1

prion 6

osv 7

cve 6

ubuntucve 6

f5 8

debiancve 1

veracode 28

centos 2

redhat 4

suse 3

slackware 3

debian 9

oraclelinux 3

securityvulns 7

ubuntu 3

ibm 3

gentoo 1

freebsd 2

amazon 4

kaspersky

KLA10290 DoS vulnerability in PHP

2014-07-10 00:00:00

KLA10514 Multiple vulnerabilities in PHP and plugins

2015-03-30 00:00:00

nessus

PHP 5.5.x < 5.5.15 Multiple Vulnerabilities

2014-07-25 00:00:00

openSUSE Security Update : php5 (openSUSE-2014-471)

2014-08-01 00:00:00

openSUSE Security Update : openSUSE-2014- (openSUSE-2014--1)

2014-07-31 00:00:00

openvas

PHP Multiple Use-After-Free Vulnerabilities (Jul 2014)

2014-07-18 00:00:00

Mageia: Security Advisory (MGASA-2014-0324)

2022-01-28 00:00:00

Debian Security Advisory DSA 3126-1 (php5 - security update)

2015-01-12 00:00:00

mageia

Updated php packages fix security vulnerabilities

2014-08-08 15:23:49

prion

Out-of-bounds

2015-03-30 10:59:00

Design/Logic Flaw

2014-07-10 11:06:00

Design/Logic Flaw

2014-09-27 10:55:00

osv

php5 - security update

2015-01-12 00:00:00

php5 - regression update

2015-03-20 00:00:00

php5 - security update

2015-03-20 00:00:00

cve

CVE-2014-9652

2015-03-30 10:59:00

CVE-2014-4698

2014-07-10 11:06:00

CVE-2014-5459

2014-09-27 10:55:00

ubuntucve

CVE-2014-4698

2014-07-04 00:00:00

CVE-2014-5459

2014-09-27 00:00:00

CVE-2014-9652

2015-01-08 00:00:00

K17212 : PHP vulnerability CVE-2014-5459

2015-09-01 00:00:00

SOL17212 - PHP vulnerability CVE-2014-5459

2015-09-01 00:00:00

SOL15761 - Multiple PHP 5.x vulnerabilities

2014-10-30 00:00:00

debiancve

CVE-2014-9652

2015-03-30 10:59:00

veracode

Arbitrary Code Execution

2019-05-02 05:04:21

Arbitrary Code Execution

2019-05-02 05:04:21

Remote Code Execution (RCE) Via Memory Corruption

2019-05-02 05:39:23

centos

php, php53 security update

2014-09-30 10:27:47

php security update

2014-09-30 10:59:18

redhat

(RHSA-2014:1326) Moderate: php53 and php security update

2014-09-30 00:00:00

(RHSA-2014:1327) Moderate: php security update

2014-09-30 00:00:00

(RHSA-2015:1053) Moderate: php55 security and bug fix update

2015-06-04 00:00:00

suse

Security update for php5 (important)

2015-03-04 16:04:57

Security update for php5 (important)

2015-03-06 11:04:50

Security update for PHP 5.3 (important)

2015-03-05 21:04:56

slackware

[slackware-security] php

2014-09-04 22:00:56

[slackware-security] php

2014-07-12 03:48:04

[slackware-security] php

2015-04-22 01:22:40

debian

[SECURITY] [DSA 3198-1] php5 security update

2015-03-20 17:31:08

[SECURITY] [DSA 3198-2] php5 regression update

2015-03-28 18:47:31

[SECURITY] [DSA 3198-2] php5 regression update

2015-03-28 18:47:31

oraclelinux

php53 and php security update

2014-09-30 00:00:00

php security update

2014-09-30 00:00:00

php55 security and bug fix update

2016-02-04 00:00:00

securityvulns

[SECURITY] [DSA 3198-1] php5 security update

2015-03-21 00:00:00

[USN-2276-1] PHP vulnerabilities

2014-07-14 00:00:00

file / PHP multiple security vulnerabilities

2014-07-14 00:00:00

ubuntu

PHP vulnerabilities

2014-07-09 00:00:00

PHP vulnerabilities

2015-03-18 00:00:00

PHP vulnerabilities

2015-02-17 00:00:00

ibm

Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manager (FSM): (CVE-2014-3597, CVE-2014-4721 and CVE-2014-5459)

2019-01-31 01:45:01

Security Bulletin: Network Intrusion Prevention System is affected by multiple D-BUS and PHP vulnerabilities (CVE-2014-3638, CVE-2014-3639, CVE-2014-3477, CVE-2014-5459, CVE-2014-3597, CVE-2014-4721)

2022-02-23 19:48:26

Security Bulletin: Multiple vulnerabilities in PHP as used by IBM QRadar Incident Forensics 7.2 MR2. (CVE-2014-3515, CVE-2014-4049, CVE-2014-3981, CVE-2014-0238, CVE-2014-0237, CVE-2014-4721)

2018-06-16 21:19:23

gentoo

file: Multiple vulnerabilities

2017-01-17 00:00:00

freebsd

Several vulnerabilities found in PHP

2015-04-16 00:00:00

PHP multiple vulnerabilities

2014-08-14 00:00:00

amazon

Important: php54

2015-04-17 12:04:00

Medium: php

2014-08-21 11:15:00

Medium: php55

2014-07-09 16:42:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.089 Low

EPSS

Percentile

93.8%

JSON

Related for H1:131452