Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 5.0
    CVE-2010-2097 The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow cont…
    PHP
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  2. 6.8
    CVE-2010-2094 Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive…
    PHP
    1 public exploit EPSS 12.7% chance of exploitation in 30 days, percentile 96%
  3. 5.0
    CVE-2010-2093 Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent a…
    PHP
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  4. 5.0
    CVE-2010-1917 Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of ser…
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  5. 5.0
    CVE-2010-1915 The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information…
    PHP
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  6. 5.0
    CVE-2010-1914 The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by inter…
    PHP
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  7. 7.5
    CVE-2010-1868 The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 all…
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  8. 9.8
    CVE-2010-1866 The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a d…
    PHP
    1 public exploit EPSS 6.7% chance of exploitation in 30 days, percentile 94%
  9. 5.0
    CVE-2010-1864 The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information…
    PHP
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  10. 5.0
    CVE-2010-1862 The chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information…
    PHP
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  11. 6.4
    CVE-2010-1861 The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addr…
    PHP
    EPSS 1.0% chance of exploitation in 30 days, percentile 63%
  12. 5.0
    CVE-2010-1860 The html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive info…
    PHP
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  13. 5.0
    CVE-2010-1130 session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to…
    PHP
    1 public exploit EPSS 9.5% chance of exploitation in 30 days, percentile 95%
  14. 7.5
    CVE-2010-1129 The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, wh…
    PHP
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  15. 6.4
    CVE-2010-1128 The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-depen…
    PHP
    1 public exploit EPSS 8.1% chance of exploitation in 30 days, percentile 94%
  16. 5.0
    CVE-2010-0397 The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request…
    PHP
    1 public exploit EPSS 11.5% chance of exploitation in 30 days, percentile 96%
  17. 5.0
    CVE-2009-4418 The unserialize function in PHP 5.3.0 and earlier allows context-dependent attackers to cause a denial of service (resource consumption) vi…
    PHP
  18. 10.0
    CVE-2009-4143 PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruptio…
    PHP
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  19. 4.3
    CVE-2009-4142 The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences,…
    PHP
    2 public exploits EPSS 6.5% chance of exploitation in 30 days, percentile 93%
  20. 6.4
    CVE-2009-2626 The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain…
    PHP
    3 public exploits EPSS 8.3% chance of exploitation in 30 days, percentile 95%
  21. 7.5
    CVE-2009-4018 The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1) safe_mode_allowed_e…
    PHP
    1 public exploit EPSS 11.3% chance of exploitation in 30 days, percentile 96%
  22. 5.0
    CVE-2009-4017 PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST r…
    PHP
    1 public exploit EPSS 12.0% chance of exploitation in 30 days, percentile 96%
  23. 6.8
    CVE-2009-3558 The posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass ope…
    PHP
    EPSS 2.1% chance of exploitation in 30 days, percentile 81%
  24. 5.0
    CVE-2009-3557 The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safe_m…
    PHP
    EPSS 2.1% chance of exploitation in 30 days, percentile 81%
  25. 7.5
    CVE-2009-3559 main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-depende…
    PHP
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  26. 9.3
    CVE-2009-3546 The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a cert…
    PHP
    EPSS 10.2% chance of exploitation in 30 days, percentile 95%
  27. 5.0
    CVE-2009-3294 The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems,…
    PHP
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  28. 7.5
    CVE-2009-3293 Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an in…
    PHP
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  29. 7.5
    CVE-2009-3292 Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity ch…
    PHP
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  30. 7.5
    CVE-2009-3291 The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown…
    PHP
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%