Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 5.0
    CVE-2011-0420 The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to caus…
    PHP
    2 public exploits EPSS 14.4% chance of exploitation in 30 days, percentile 96%
  2. 5.0
    CVE-2011-0755 Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return val…
    PHP
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  3. 4.4
    CVE-2011-0754 The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbo…
    PHP
  4. 4.3
    CVE-2011-0753 Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attacke…
    PHP
  5. 5.0
    CVE-2011-0752 The extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal arr…
    PHP
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  6. 6.8
    CVE-2010-4700 The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the…
    PHP
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  7. 5.0
    CVE-2010-4699 The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings that are unrecognized…
    PHP
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  8. 5.0
    CVE-2010-4698 Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a d…
    PHP
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  9. 6.8
    CVE-2010-4697 Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to caus…
    PHP
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  10. 5.0
    CVE-2006-7243 PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictio…
    PHP
    EPSS 5.4% chance of exploitation in 30 days, percentile 92%
  11. 5.0
    CVE-2010-4645 strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent a…
    PHP
    1 public exploit EPSS 15.1% chance of exploitation in 30 days, percentile 96%
  12. 5.0
    CVE-2010-4150 Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before…
    PHP
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  13. 5.0
    CVE-2010-4409 Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attac…
    PHP
    1 public exploit EPSS 18.9% chance of exploitation in 30 days, percentile 97%
  14. 6.8
    CVE-2009-5016 Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross…
    PHP
    EPSS 2.7% chance of exploitation in 30 days, percentile 85%
  15. 6.8
    CVE-2010-3870 The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8…
    PHP
    1 public exploit EPSS 11.3% chance of exploitation in 30 days, percentile 96%
  16. 4.3
    CVE-2010-3709 The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause…
    PHP
    1 public exploit EPSS 13.3% chance of exploitation in 30 days, percentile 96%
  17. 5.0
    CVE-2010-3436 fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the len…
    PHP
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  18. 4.3
    CVE-2010-3710 Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL…
    PHP
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  19. 6.8
    CVE-2010-2950 Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensi…
    PHP
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  20. 4.3
    CVE-2010-2531 The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur…
    PHP
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  21. 5.0
    CVE-2010-2484 The strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain sensitive information (memory contents) or trigg…
    PHP
    EPSS 1.8% chance of exploitation in 30 days, percentile 79%
  22. 5.0
    CVE-2010-3065 The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which a…
    PHP
    EPSS 2.5% chance of exploitation in 30 days, percentile 84%
  23. 6.8
    CVE-2010-3064 Stack-based buffer overflow in the php_mysqlnd_auth_write function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-depende…
    PHP
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  24. 5.0
    CVE-2010-3063 The php_mysqlnd_read_error_from_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length…
    PHP
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  25. 5.0
    CVE-2010-3062 mysqlnd_wireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers to (1) read sensitive memory via a modifie…
    PHP
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  26. 7.5
    CVE-2010-2225 Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute a…
    PHP
    EPSS 5.3% chance of exploitation in 30 days, percentile 92%
  27. 6.4
    CVE-2010-2191 The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) ZEND_ASSIGN_CONCAT o…
    PHP
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  28. 5.0
    CVE-2010-2190 The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependen…
    PHP
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  29. 5.0
    CVE-2010-2101 The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 through 5.2.13 and 5.…
    PHP
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  30. 5.0
    CVE-2010-2100 The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5…
    PHP
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%