Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 5.0
    CVE-2012-0788 The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a…
    PHP
    1 public exploit EPSS 8.6% chance of exploitation in 30 days, percentile 95%
  2. 6.8
    CVE-2012-0831 PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variab…
    PHP
    EPSS 6.5% chance of exploitation in 30 days, percentile 93%
  3. 7.5
    CVE-2012-0830 The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request conta…
    PHP
    1 public exploit EPSS 29.8% chance of exploitation in 30 days, percentile 98%
  4. 6.4
    CVE-2012-0057 PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesh…
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  5. 5.0
    CVE-2012-0781 The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application…
    PHP
    1 public exploit EPSS 10.4% chance of exploitation in 30 days, percentile 95%
  6. 5.0
    CVE-2011-4153 PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of serv…
    PHP
    1 public exploit EPSS 11.8% chance of exploitation in 30 days, percentile 96%
  7. 5.0
    CVE-2011-4885 PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which all…
    PHP
    4 public exploits EPSS 83.4% chance of exploitation in 30 days, percentile 99.6%
  8. 6.4
    CVE-2011-4566 Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote a…
    PHP
    EPSS 6.6% chance of exploitation in 30 days, percentile 93%
  9. 7.5
    CVE-2011-3379 The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute…
    PHP
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  10. 10.0
    CVE-2011-3268 Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt…
    PHP
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  11. 5.0
    CVE-2011-3267 PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service…
    PHP
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  12. 4.3
    CVE-2011-3189 The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which…
    PHP
    EPSS 4.2% chance of exploitation in 30 days, percentile 91%
  13. 5.0
    CVE-2011-3182 PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-depen…
    PHP
    1 public exploit EPSS 19.2% chance of exploitation in 30 days, percentile 97%
  14. 5.0
    CVE-2011-2483 crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly…
    PostgreSQLPHP
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  15. 5.0
    CVE-2011-1657 The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-dependent attackers to…
    PHP
    EPSS 5.2% chance of exploitation in 30 days, percentile 92%
  16. 6.4
    CVE-2011-2202 The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST re…
    PHP
    1 public exploit EPSS 19.7% chance of exploitation in 30 days, percentile 97%
  17. 7.5
    CVE-2011-1938 Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependen…
    PHP
    2 public exploits EPSS 23.1% chance of exploitation in 30 days, percentile 97%
  18. 6.3
    CVE-2011-0441 The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directo…
    PHP
  19. 4.3
    CVE-2011-1471 Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of s…
    PHP
    1 public exploit EPSS 13.2% chance of exploitation in 30 days, percentile 96%
  20. 4.3
    CVE-2011-1470 The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive…
    PHP
    1 public exploit EPSS 9.5% chance of exploitation in 30 days, percentile 95%
  21. 4.3
    CVE-2011-1469 Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (app…
    PHP
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  22. 4.3
    CVE-2011-1468 Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consum…
    PHP
    2 public exploits EPSS 13.3% chance of exploitation in 30 days, percentile 96%
  23. 5.0
    CVE-2011-1467 Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allo…
    PHP
    1 public exploit EPSS 12.7% chance of exploitation in 30 days, percentile 96%
  24. 5.0
    CVE-2011-1466 Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a de…
    PHP
    EPSS 5.9% chance of exploitation in 30 days, percentile 93%
  25. 4.3
    CVE-2011-1464 Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-…
    PHP
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  26. 4.3
    CVE-2011-0708 exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a d…
    PHP
    1 public exploit EPSS 9.8% chance of exploitation in 30 days, percentile 95%
  27. 4.3
    CVE-2011-0421 The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHA…
    PHP
    1 public exploit EPSS 13.5% chance of exploitation in 30 days, percentile 96%
  28. 7.5
    CVE-2011-1148 Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial o…
    PHP
    EPSS 4.7% chance of exploitation in 30 days, percentile 92%
  29. 7.5
    CVE-2011-1153 Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to…
    PHP
    EPSS 6.8% chance of exploitation in 30 days, percentile 94%
  30. 7.5
    CVE-2011-1092 Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possi…
    PHP
    1 public exploit EPSS 17.9% chance of exploitation in 30 days, percentile 97%