Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 9.8
    CVE-2016-3074 Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or…
    PHP
    1 public exploit EPSS 35.7% chance of exploitation in 30 days, percentile 98%
  2. 8.2
    CVE-2016-3142 The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obta…
    PHP
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  3. 9.8
    CVE-2016-3141 Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause…
    PHP
    EPSS 36.0% chance of exploitation in 30 days, percentile 98%
  4. 7.3
    CVE-2016-1904 Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly h…
    PHP
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  5. 9.1
    CVE-2016-1903 The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 a…
    PHP
    EPSS 7.8% chance of exploitation in 30 days, percentile 94%
  6. 9.8
    CVE-2015-8617 Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers…
    PHP
    1 public exploit EPSS 22.8% chance of exploitation in 30 days, percentile 97%
  7. 8.6
    CVE-2015-8616 Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x before 7.0.1 allows…
    PHP
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  8. 7.3
    CVE-2015-6836 The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage…
    PHP
    EPSS 10.3% chance of exploitation in 30 days, percentile 95%
  9. 7.5
    CVE-2015-6833 Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote at…
    PHP
    EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  10. 7.3
    CVE-2015-6832 Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.…
    PHP
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  11. 7.3
    CVE-2015-6831 Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to…
    PHP
    EPSS 7.1% chance of exploitation in 30 days, percentile 94%
  12. 7.3
    CVE-2015-6527 The php_str_replace_in_subject function in ext/standard/string.c in PHP 7.x before 7.0.0 allows remote attackers to execute arbitrary code…
    PHP
    EPSS 3.9% chance of exploitation in 30 days, percentile 90%
  13. 7.3
    CVE-2015-5590 Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x befor…
    PHP
    EPSS 4.6% chance of exploitation in 30 days, percentile 91%
  14. 9.8
    CVE-2016-1283 The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?…
    PHP
    EPSS 7.8% chance of exploitation in 30 days, percentile 94%
  15. 6.8
    CVE-2015-7804 Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers…
    PHP
    EPSS 8.5% chance of exploitation in 30 days, percentile 95%
  16. 6.8
    CVE-2015-7803 The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial…
    PHP
    EPSS 10.3% chance of exploitation in 30 days, percentile 95%
  17. 9.8
    CVE-2015-8394 PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (inte…
    PHP
    EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  18. 7.5
    CVE-2015-8393 pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information…
    PHP
    EPSS 4.4% chance of exploitation in 30 days, percentile 91%
  19. 9.8
    CVE-2015-8391 The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a den…
    PHP
    EPSS 6.4% chance of exploitation in 30 days, percentile 93%
  20. 9.8
    CVE-2015-8390 PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (unin…
    PHP
    EPSS 4.7% chance of exploitation in 30 days, percentile 91%
  21. 9.8
    CVE-2015-8389 PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (i…
    PHP
    EPSS 3.9% chance of exploitation in 30 days, percentile 90%
  22. 7.3
    CVE-2015-8387 PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of servic…
    PHP
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  23. 9.8
    CVE-2015-8386 PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to c…
    PHP
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  24. 9.8
    CVE-2015-8383 PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflo…
    PHP
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  25. 5.0
    CVE-2015-4148 The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri…
    PHP
    1 public exploit EPSS 19.8% chance of exploitation in 30 days, percentile 97%
  26. 7.5
    CVE-2015-4147 The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __d…
    PHP
    EPSS 12.2% chance of exploitation in 30 days, percentile 96%
  27. 7.5
    CVE-2015-4026 The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x…
    PHP
    EPSS 18.8% chance of exploitation in 30 days, percentile 97%
  28. 7.5
    CVE-2015-4025 PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situation…
    PHP
    EPSS 17.0% chance of exploitation in 30 days, percentile 97%
  29. 5.0
    CVE-2015-4024 Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25,…
    PHP
    EPSS 41.8% chance of exploitation in 30 days, percentile 98%
  30. 7.5
    CVE-2015-4022 Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remo…
    PHP
    EPSS 20.1% chance of exploitation in 30 days, percentile 97%