Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 6.4
    CVE-2008-7068 The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service (file truncation) via a key w…
    PHP
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  2. 7.2
    CVE-2008-7002 PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain functions, which might allow local users to…
    PHP
    1 public exploit
  3. 4.3
    CVE-2009-2687 The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malf…
    PHP
    EPSS 4.4% chance of exploitation in 30 days, percentile 91%
  4. 5.0
    CVE-2009-1272 The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of serv…
    PHP
    EPSS 2.0% chance of exploitation in 30 days, percentile 80%
  5. 5.0
    CVE-2009-1271 The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentat…
    PHP
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  6. 2.1
    CVE-2009-0754 PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web s…
    PHP
    1 public exploit
  7. 7.5
    CVE-2008-5844 PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quotes_gpc regardless of…
    PHP
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  8. 2.6
    CVE-2008-5814 Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inj…
    PHP
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  9. 5.0
    CVE-2008-5498 Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary…
    PHP
    1 public exploit EPSS 8.8% chance of exploitation in 30 days, percentile 95%
  10. 10.0
    CVE-2008-5557 Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows c…
    PHP
    EPSS 7.4% chance of exploitation in 30 days, percentile 94%
  11. 7.5
    CVE-2008-5658 Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to writ…
    PHP
    EPSS 4.0% chance of exploitation in 30 days, percentile 90%
  12. 7.5
    CVE-2008-5625 PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in http…
    PHP
    1 public exploit EPSS 7.3% chance of exploitation in 30 days, percentile 94%
  13. 7.5
    CVE-2008-5624 PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which a…
    PHP
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  14. 5.1
    CVE-2008-4107 The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to lever…
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  15. 5.0
    CVE-2008-3660 PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash)…
    PHP
    EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  16. 6.4
    CVE-2008-3659 Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a d…
    PHP
    EPSS 6.0% chance of exploitation in 30 days, percentile 93%
  17. 7.5
    CVE-2008-3658 Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent…
    PHP
    EPSS 6.8% chance of exploitation in 30 days, percentile 94%
  18. 7.5
    CVE-2008-2371 Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attacker…
    PHP
    EPSS 6.7% chance of exploitation in 30 days, percentile 94%
  19. 5.0
    CVE-2008-2829 php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial o…
    PHP
    EPSS 5.3% chance of exploitation in 30 days, percentile 92%
  20. 5.0
    CVE-2008-2666 Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by…
    PHP
    1 public exploit EPSS 13.9% chance of exploitation in 30 days, percentile 96%
  21. 5.0
    CVE-2008-2665 Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restric…
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 88%
  22. 9.8
    CVE-2008-2108 The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that genera…
    PHP
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  23. 7.5
    CVE-2008-2107 The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using value…
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  24. 10.0
    CVE-2008-2051 The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyt…
    PHP
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  25. 10.0
    CVE-2008-2050 Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  26. 9.8
    CVE-2008-0599 The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating t…
    PHP
    EPSS 10.9% chance of exploitation in 30 days, percentile 95%
  27. 5.0
    CVE-2008-1384 Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified oth…
    PHP
    EPSS 2.1% chance of exploitation in 30 days, percentile 82%
  28. 5.0
    CVE-2007-4850 curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_b…
    PHP
    1 public exploit EPSS 5.6% chance of exploitation in 30 days, percentile 93%
  29. 7.5
    CVE-2008-0145 Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors.
    PHP
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  30. 2.1
    CVE-2007-6039 PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long string in (1) the doma…
    PHP
    1 public exploit EPSS 1.0% chance of exploitation in 30 days, percentile 64%