Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 6.5
    CVE-2016-6292 The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote att…
    PHP
    EPSS 3.9% chance of exploitation in 30 days, percentile 90%
  2. 9.8
    CVE-2016-6291 The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote…
    PHP
    EPSS 5.6% chance of exploitation in 30 days, percentile 93%
  3. 9.8
    CVE-2016-6290 ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data struct…
    PHP
    EPSS 5.5% chance of exploitation in 30 days, percentile 92%
  4. 7.8
    CVE-2016-6289 Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9…
    PHP
    EPSS 3.8% chance of exploitation in 30 days, percentile 90%
  5. 9.8
    CVE-2016-6288 The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-…
    PHP
    EPSS 4.9% chance of exploitation in 30 days, percentile 92%
  6. 8.1
    CVE-2016-5385 HTTP Proxy header vulnerability
    PHPpackagist
    EPSS 50.4% chance of exploitation in 30 days, percentile 98%
  7. 8.1
    CVE-2016-6174 applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power…
    PHP
    1 public exploit EPSS 12.3% chance of exploitation in 30 days, percentile 96%
  8. 9.8
    CVE-2016-4544 The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate…
    PHP
    EPSS 6.5% chance of exploitation in 30 days, percentile 93%
  9. 9.8
    CVE-2016-4543 The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate…
    PHP
    EPSS 11.9% chance of exploitation in 30 days, percentile 96%
  10. 9.8
    CVE-2016-4542 The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly cons…
    PHP
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  11. 9.8
    CVE-2016-4541 The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows…
    PHP
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  12. 9.8
    CVE-2016-4540 The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows…
    PHP
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  13. 9.8
    CVE-2016-4539 The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers…
    PHP
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  14. 9.8
    CVE-2016-4538 The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structur…
    PHP
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  15. 9.8
    CVE-2016-4537 The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for…
    PHP
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  16. 9.8
    CVE-2016-4346 Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service…
    PHP
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  17. 9.8
    CVE-2016-4345 Integer overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP before 7.0.4 allows remote attackers to ca…
    PHP
    EPSS 5.2% chance of exploitation in 30 days, percentile 92%
  18. 9.8
    CVE-2016-4344 Integer overflow in the xml_utf8_encode function in ext/xml/xml.c in PHP before 7.0.4 allows remote attackers to cause a denial of service…
    PHP
    EPSS 5.2% chance of exploitation in 30 days, percentile 92%
  19. 8.8
    CVE-2016-4343 The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files…
    PHP
    EPSS 4.2% chance of exploitation in 30 days, percentile 91%
  20. 8.8
    CVE-2016-4342 ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allo…
    PHP
    EPSS 5.3% chance of exploitation in 30 days, percentile 92%
  21. 9.8
    CVE-2015-8880 Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering…
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  22. 7.5
    CVE-2015-8879 The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows re…
    PHP
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  23. 5.9
    CVE-2015-8878 main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to…
    PHP
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  24. 7.5
    CVE-2015-8877 The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, u…
    PHP
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  25. 9.8
    CVE-2015-8876 Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, whic…
    PHP
    EPSS 7.7% chance of exploitation in 30 days, percentile 94%
  26. 7.5
    CVE-2015-8867 The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorr…
    PHP
    EPSS 4.4% chance of exploitation in 30 days, percentile 91%
  27. 9.6
    CVE-2015-8866 ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_ent…
    PHP
    EPSS 4.2% chance of exploitation in 30 days, percentile 91%
  28. 4.3
    CVE-2014-9767 Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and…
    PHP
    EPSS 4.7% chance of exploitation in 30 days, percentile 91%
  29. 9.8
    CVE-2016-4073 Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, a…
    PHP
    EPSS 7.1% chance of exploitation in 30 days, percentile 94%
  30. 9.8
    CVE-2016-4072 The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a…
    PHP
    EPSS 5.9% chance of exploitation in 30 days, percentile 93%