Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 4.8
    CVE-2019-11035 Heap over-read in PHP EXIF extension
    PHP
    EPSS 4.4% chance of exploitation in 30 days, percentile 91%
  2. 4.8
    CVE-2019-11034 Heap over-read in PHP EXIF extension
    PHP
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  3. 8.1
    CVE-2019-9675 An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3.
    PHP
    EPSS 6.0% chance of exploitation in 30 days, percentile 93%
  4. 9.8
    CVE-2019-9641 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
    PHP
    EPSS 9.4% chance of exploitation in 30 days, percentile 95%
  5. 7.5
    CVE-2019-9640 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
    PHP
    EPSS 6.2% chance of exploitation in 30 days, percentile 93%
  6. 7.5
    CVE-2019-9639 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
    PHP
    EPSS 8.2% chance of exploitation in 30 days, percentile 94%
  7. 7.5
    CVE-2019-9638 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
    PHP
    EPSS 6.7% chance of exploitation in 30 days, percentile 94%
  8. 7.5
    CVE-2019-9637 An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
    PHP
    EPSS 7.3% chance of exploitation in 30 days, percentile 94%
  9. 9.8
    CVE-2019-9025 An issue was discovered in PHP 7.3.x before 7.3.1.
    PHP
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  10. 7.5
    CVE-2019-9024 An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.
    PHP
    EPSS 7.1% chance of exploitation in 30 days, percentile 94%
  11. 9.8
    CVE-2019-9023 An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.
    PHP
    EPSS 9.3% chance of exploitation in 30 days, percentile 95%
  12. 7.5
    CVE-2019-9022 An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2.
    PHP
    EPSS 4.2% chance of exploitation in 30 days, percentile 91%
  13. 9.8
    CVE-2019-9021 An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.
    PHP
    EPSS 10.1% chance of exploitation in 30 days, percentile 95%
  14. 9.8
    CVE-2019-9020 An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.
    PHP
    EPSS 10.1% chance of exploitation in 30 days, percentile 95%
  15. 7.5
    CVE-2018-20783 In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may all…
    PHP
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  16. 8.8
    CVE-2019-6977 gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5…
    PHP
    1 public exploit EPSS 71.5% chance of exploitation in 30 days, percentile 99.4%
  17. 7.5
    CVE-2018-19935 ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and appl…
    PHP
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  18. 8.8
    CVE-2018-19520 An issue was discovered in SDCMS 1.6 with PHP 5.x.
    PHP
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  19. 7.5
    CVE-2018-19518 University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of…
    PHP
    2 public exploits EPSS 96.1% chance of exploitation in 30 days, percentile 99.8%
  20. 7.5
    CVE-2018-19396 ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unserial…
    PHP
    EPSS 4.6% chance of exploitation in 30 days, percentile 91%
  21. 7.5
    CVE-2018-19395 ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and applica…
    PHP
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  22. 6.1
    CVE-2018-17082 The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a…
    PHP
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  23. 7.5
    CVE-2018-15132 An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8.
    PHP
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%
  24. 7.5
    CVE-2018-14884 An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1.
    PHP
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  25. 7.5
    CVE-2018-14883 An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8.
    PHP
    EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  26. 5.5
    CVE-2018-14851 exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 all…
    PHP
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  27. 9.8
    CVE-2017-9120 PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspeci…
    PHP
    EPSS 7.6% chance of exploitation in 30 days, percentile 94%
  28. 7.5
    CVE-2017-9118 PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  29. 9.8
    CVE-2018-12882 exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) bec…
    PHP
    EPSS 6.5% chance of exploitation in 30 days, percentile 93%
  30. 8.8
    CVE-2018-10549 An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5.
    PHP
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%