Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    CVE-2018-10548 An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5.
    PHP
    EPSS 8.3% chance of exploitation in 30 days, percentile 95%
  2. 6.1
    CVE-2018-10547 An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5.
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  3. 7.5
    CVE-2018-10546 An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5.
    PHP
    EPSS 9.8% chance of exploitation in 30 days, percentile 95%
  4. 4.7
    CVE-2018-10545 An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4.
    PHP
  5. 9.8
    CVE-2018-7584 In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while p…
    PHP
    1 public exploit EPSS 87.3% chance of exploitation in 30 days, percentile 99.7%
  6. 6.5
    CVE-2015-9253 An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20.
    PHP
    EPSS 4.2% chance of exploitation in 30 days, percentile 91%
  7. 7.5
    CVE-2016-10712 In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the…
    PHP
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  8. 6.1
    CVE-2018-5712 An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1.
    PHP
    EPSS 79.9% chance of exploitation in 30 days, percentile 99.6%
  9. 5.5
    CVE-2018-5711 gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x befor…
    PHP
    EPSS 13.2% chance of exploitation in 30 days, percentile 96%
  10. 7.5
    CVE-2017-16642 In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of'…
    PHP
    1 public exploit EPSS 26.4% chance of exploitation in 30 days, percentile 98%
  11. 7.5
    CVE-2017-12934 ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free while unserializing un…
    PHP
    EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  12. 9.8
    CVE-2017-12933 The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is pr…
    PHP
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  13. 9.8
    CVE-2017-12932 ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing…
    PHP
    EPSS 7.4% chance of exploitation in 30 days, percentile 94%
  14. 6.5
    CVE-2017-7890 The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7…
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  15. 7.8
    CVE-2017-11628 In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zen…
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 88%
  16. 9.8
    CVE-2017-11362 In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows rem…
    PHP
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  17. 9.1
    CVE-2017-11147 In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash…
    PHP
    EPSS 4.7% chance of exploitation in 30 days, percentile 91%
  18. 7.5
    CVE-2017-11145 In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be us…
    PHP
    EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  19. 7.5
    CVE-2017-11144 In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of t…
    PHP
    EPSS 6.2% chance of exploitation in 30 days, percentile 93%
  20. 7.5
    CVE-2017-11143 In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for d…
    PHP
    EPSS 6.8% chance of exploitation in 30 days, percentile 94%
  21. 7.5
    CVE-2017-11142 In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by…
    PHP
    EPSS 8.3% chance of exploitation in 30 days, percentile 94%
  22. 7.5
    CVE-2016-10397 In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to by…
    PHP
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  23. 9.8
    CVE-2016-4473 /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.
    PHP
    EPSS 7.8% chance of exploitation in 30 days, percentile 94%
  24. 7.5
    CVE-2017-9229 An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5.
    PHP
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%
  25. 9.8
    CVE-2017-9228 An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5.
    PHP
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  26. 9.8
    CVE-2017-9227 An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5.
    PHP
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  27. 9.8
    CVE-2017-9226 An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5.
    PHP
    EPSS 7.5% chance of exploitation in 30 days, percentile 94%
  28. 9.8
    CVE-2017-9225 An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5.
    PHP
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  29. 9.8
    CVE-2017-9224 An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5.
    PHP
    EPSS 6.5% chance of exploitation in 30 days, percentile 93%
  30. 9.8
    CVE-2017-9119 The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and ap…
    PHP
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%