Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 6.8
    CVE-2007-1411 Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary c…
    PHP
    1 public exploit EPSS 7.5% chance of exploitation in 30 days, percentile 94%
  2. 6.9
    CVE-2007-1401 Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to ga…
    PHP
    1 public exploit
  3. 9.8
    CVE-2007-1399 Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote att…
    PHP
    1 public exploit EPSS 20.1% chance of exploitation in 30 days, percentile 97%
  4. 6.8
    CVE-2007-1396 The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, does not prevent the…
    PHP
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  5. 9.8
    CVE-2007-1383 Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflow…
    PHP
    1 public exploit EPSS 15.4% chance of exploitation in 30 days, percentile 96%
  6. 7.6
    CVE-2007-1381 The wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304,…
    PHP
    1 public exploit EPSS 9.2% chance of exploitation in 30 days, percentile 95%
  7. 5.0
    CVE-2007-1380 The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers…
    PHP
    1 public exploit EPSS 9.4% chance of exploitation in 30 days, percentile 95%
  8. 5.1
    CVE-2007-1379 The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow conte…
    PHP
    EPSS 1.7% chance of exploitation in 30 days, percentile 76%
  9. 5.1
    CVE-2007-1378 The ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-dependent attackers to write to arbitrary mem…
    PHP
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  10. 7.5
    CVE-2007-1376 The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resou…
    PHP
    2 public exploits EPSS 10.4% chance of exploitation in 30 days, percentile 95%
  11. 5.0
    CVE-2007-1375 Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a…
    PHP
    1 public exploit EPSS 8.5% chance of exploitation in 30 days, percentile 95%
  12. 4.3
    CVE-2007-1287 A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripti…
    PHP
    1 public exploit EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  13. 6.8
    CVE-2007-1286 Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unse…
    PHP
    4 public exploits EPSS 40.9% chance of exploitation in 30 days, percentile 98%
  14. 7.5
    CVE-2007-1285 The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and P…
    PHP
    1 public exploit EPSS 18.8% chance of exploitation in 30 days, percentile 97%
  15. 4.3
    CVE-2007-0988 The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attac…
    PHP
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  16. 7.8
    CVE-2007-0911 Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service (crash).
    PHP
    1 public exploit EPSS 5.5% chance of exploitation in 30 days, percentile 92%
  17. 10.0
    CVE-2007-0910 Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.
    PHP
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  18. 7.5
    CVE-2007-0909 Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to…
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 88%
  19. 5.0
    CVE-2007-0908 The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variab…
    PHP
    1 public exploit EPSS 12.5% chance of exploitation in 30 days, percentile 96%
  20. 5.0
    CVE-2007-0907 Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op fun…
    PHP
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  21. 7.5
    CVE-2007-0906 Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecif…
    PHP
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  22. 7.5
    CVE-2007-0905 PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension.
    PHP
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  23. 7.5
    CVE-2007-0455 Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a de…
    PHP
    EPSS 12.3% chance of exploitation in 30 days, percentile 96%
  24. 4.6
    CVE-2006-6383 PHP 5.2.0 and 4.4 allows local users to bypass safe_mode and open_basedir restrictions via a malicious path and a null byte before a ";" in…
    PHP
    1 public exploit EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  25. 7.2
    CVE-2006-5706 Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified ac…
    PHP
  26. 7.5
    CVE-2006-5465 Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (…
    PHP
    EPSS 10.3% chance of exploitation in 30 days, percentile 95%
  27. 10.0
    CVE-2006-4812 Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unseriali…
    PHP
    1 public exploit EPSS 20.7% chance of exploitation in 30 days, percentile 97%
  28. 6.2
    CVE-2006-5178 Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combin…
    PHP
    1 public exploit
  29. 3.6
    CVE-2006-4625 PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and…
    PHP
    1 public exploit EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  30. 2.6
    CVE-2006-4486 Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to…
    PHP
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%