Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 9.8
    CVE-2016-7134 ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote attackers to cause a den…
    PHP
    EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  2. 8.1
    CVE-2016-7133 Zend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc operations, which allows remote attackers…
    PHP
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  3. 7.5
    CVE-2016-7132 ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference a…
    PHP
    EPSS 8.8% chance of exploitation in 30 days, percentile 95%
  4. 7.5
    CVE-2016-7131 ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference a…
    PHP
    EPSS 8.8% chance of exploitation in 30 days, percentile 95%
  5. 7.5
    CVE-2016-7130 The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial o…
    PHP
    EPSS 6.7% chance of exploitation in 30 days, percentile 93%
  6. 9.8
    CVE-2016-7129 The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial…
    PHP
    EPSS 6.8% chance of exploitation in 30 days, percentile 94%
  7. 5.3
    CVE-2016-7128 The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offs…
    PHP
    EPSS 7.8% chance of exploitation in 30 days, percentile 94%
  8. 9.8
    CVE-2016-7127 The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which all…
    PHP
    EPSS 6.8% chance of exploitation in 30 days, percentile 94%
  9. 9.8
    CVE-2016-7126 The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of col…
    PHP
    EPSS 8.8% chance of exploitation in 30 days, percentile 95%
  10. 7.5
    CVE-2016-7125 ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, whic…
    PHP
    EPSS 5.8% chance of exploitation in 30 days, percentile 93%
  11. 9.8
    CVE-2016-7124 ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attacker…
    PHP
    EPSS 16.5% chance of exploitation in 30 days, percentile 97%
  12. 6.5
    CVE-2016-6207 Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote…
    PHP
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  13. 9.8
    CVE-2016-5773 php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize im…
    PHP
    EPSS 9.3% chance of exploitation in 30 days, percentile 95%
  14. 9.8
    CVE-2016-5772 Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23,…
    PHP
    EPSS 9.7% chance of exploitation in 30 days, percentile 95%
  15. 9.8
    CVE-2016-5771 spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and…
    PHP
    EPSS 15.5% chance of exploitation in 30 days, percentile 96%
  16. 9.8
    CVE-2016-5770 Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23…
    PHP
    EPSS 7.3% chance of exploitation in 30 days, percentile 94%
  17. 9.8
    CVE-2016-5769 Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote…
    PHP
    EPSS 8.4% chance of exploitation in 30 days, percentile 95%
  18. 9.8
    CVE-2016-5768 Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37,…
    PHP
    EPSS 9.6% chance of exploitation in 30 days, percentile 95%
  19. 9.1
    CVE-2016-5114 sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return v…
    PHP
    EPSS 4.5% chance of exploitation in 30 days, percentile 91%
  20. 8.6
    CVE-2016-5096 Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause…
    PHP
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  21. 8.6
    CVE-2016-5095 Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows rem…
    PHP
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  22. 8.6
    CVE-2016-5094 Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attack…
    PHP
    EPSS 4.5% chance of exploitation in 30 days, percentile 91%
  23. 8.6
    CVE-2016-5093 The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 doe…
    PHP
    EPSS 5.3% chance of exploitation in 30 days, percentile 92%
  24. 9.8
    CVE-2016-3132 Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote atta…
    PHP
    EPSS 11.7% chance of exploitation in 30 days, percentile 96%
  25. 9.8
    CVE-2016-3078 Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-…
    PHP
    1 public exploit EPSS 56.1% chance of exploitation in 30 days, percentile 99%
  26. 6.1
    CVE-2015-8935 The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line foldi…
    PHP
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  27. 8.8
    CVE-2016-6297 Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.…
    PHP
    EPSS 5.2% chance of exploitation in 30 days, percentile 92%
  28. 9.8
    CVE-2016-6296 Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.…
    PHP
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  29. 9.8
    CVE-2016-6295 ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation an…
    PHP
    EPSS 5.4% chance of exploitation in 30 days, percentile 92%
  30. 9.8
    CVE-2016-6294 The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 do…
    PHP
    EPSS 5.8% chance of exploitation in 30 days, percentile 93%