Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 6.8
    CVE-2014-3670 The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates…
    PHP
    EPSS 22.6% chance of exploitation in 30 days, percentile 97%
  2. 7.5
    CVE-2014-3669 Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x befo…
    PHP
    EPSS 28.9% chance of exploitation in 30 days, percentile 98%
  3. 5.0
    CVE-2014-3668 Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP befor…
    PHP
    EPSS 27.0% chance of exploitation in 30 days, percentile 98%
  4. 3.6
    CVE-2014-5459 The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) r…
    PHP
  5. 6.4
    CVE-2014-5120 gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which mi…
    PHP
    EPSS 16.9% chance of exploitation in 30 days, percentile 97%
  6. 6.8
    CVE-2014-3597 Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS s…
    PHP
    EPSS 15.4% chance of exploitation in 30 days, percentile 96%
  7. 4.3
    CVE-2014-3587 Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.…
    PHP
    EPSS 20.2% chance of exploitation in 30 days, percentile 97%
  8. 4.6
    CVE-2014-4698 Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause…
    PHP
  9. 4.6
    CVE-2014-4670 Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause…
    PHP
  10. 7.5
    CVE-2014-3515 The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array dat…
    PHP
    EPSS 30.1% chance of exploitation in 30 days, percentile 98%
  11. 4.3
    CVE-2014-3487 The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, do…
    PHP
    EPSS 14.9% chance of exploitation in 30 days, percentile 96%
  12. 6.5
    CVE-2014-3480 The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14,…
    PHP
    EPSS 11.5% chance of exploitation in 30 days, percentile 96%
  13. 4.3
    CVE-2014-3479 The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before…
    PHP
    EPSS 14.9% chance of exploitation in 30 days, percentile 96%
  14. 6.5
    CVE-2014-3478 Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5…
    PHP
    EPSS 15.2% chance of exploitation in 30 days, percentile 96%
  15. 6.5
    CVE-2014-0207 The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.…
    PHP
    EPSS 16.9% chance of exploitation in 30 days, percentile 97%
  16. 2.6
    CVE-2014-4721 The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type…
    PHP
    EPSS 5.9% chance of exploitation in 30 days, percentile 93%
  17. 5.0
    CVE-2014-3538 file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial…
    PHP
    EPSS 11.8% chance of exploitation in 30 days, percentile 96%
  18. 5.1
    CVE-2014-4049 Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a…
    PHP
    EPSS 10.9% chance of exploitation in 30 days, percentile 95%
  19. 3.3
    CVE-2014-3981 acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink atta…
    PHP
  20. 5.0
    CVE-2014-0238 The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers…
    PHP
    EPSS 18.8% chance of exploitation in 30 days, percentile 97%
  21. 5.0
    CVE-2014-0237 The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attacker…
    PHP
    EPSS 18.0% chance of exploitation in 30 days, percentile 97%
  22. 7.2
    CVE-2014-0185 sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNI…
    PHP
  23. 5.0
    CVE-2013-7345 The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited…
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  24. 4.3
    CVE-2014-2497 The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of serv…
    PHP
    EPSS 20.3% chance of exploitation in 30 days, percentile 97%
  25. 4.3
    CVE-2014-2270 softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access a…
    PHP
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  26. 5.0
    CVE-2014-1943 Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash)…
    PHP
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  27. 5.0
    CVE-2014-2020 ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by usin…
    PHP
    EPSS 2.5% chance of exploitation in 30 days, percentile 85%
  28. 5.8
    CVE-2013-7328 Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a d…
    PHP
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  29. 6.8
    CVE-2013-7327 The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a de…
    PHP
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  30. 6.8
    CVE-2013-7226 Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service…
    PHP
    EPSS 6.7% chance of exploitation in 30 days, percentile 94%