Skip to content
Fencer Vulns

All · PHP

Newest first. Every view here is also a feed.

  1. 5.3
    CVE-2020-7066 get_headers() silently truncates after a null byte
    PHPbitnami
    EPSS 2.7% chance of exploitation in 30 days, percentile 85%
  2. 7.4
    CVE-2020-7065 mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full
    PHPbitnami
    EPSS 4.9% chance of exploitation in 30 days, percentile 92%
  3. 6.5
    CVE-2020-7064 Use-of-uninitialized-value in exif
    PHPbitnami
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  4. 5.5
    CVE-2020-7063 Files added to tar with Phar::buildFromIterator have all-access permissions
    PHPbitnami
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  5. 7.5
    CVE-2020-7062 Null Pointer Dereference in PHP Session Upload Progress
    PHPbitnami
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  6. 6.5
    CVE-2020-7061 heap-buffer-overflow in phar_extract_file
    PHPbitnami
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  7. 9.8
    CVE-2014-3622 Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x before 5.6.1 might allow remote attacke…
    PHP
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  8. 7.5
    CVE-2011-3336 regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.
    PHP
    1 public exploit EPSS 6.5% chance of exploitation in 30 days, percentile 93%
  9. 6.5
    CVE-2020-7060 global buffer-overflow in mbfl_filt_conv_big5_wchar
    PHPbitnami
    EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  10. 6.5
    CVE-2020-7059 OOB read in php_strip_tags_ex
    PHPbitnami
    EPSS 7.1% chance of exploitation in 30 days, percentile 94%
  11. 5.5
    CVE-2015-2326 The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (…
    MariaDBPHP
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  12. 7.8
    CVE-2015-2325 The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (ou…
    MariaDBPHP
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  13. 4.8
    CVE-2019-11050 Use-after-free in exif parsing under memory sanitizer
    PHP
    EPSS 7.6% chance of exploitation in 30 days, percentile 94%
  14. 6.5
    CVE-2019-11049 mail() may release string with refcount==1 twice
    PHP
    EPSS 4.2% chance of exploitation in 30 days, percentile 91%
  15. 4.8
    CVE-2019-11047 Heap-buffer-overflow READ in exif
    PHP
    EPSS 7.5% chance of exploitation in 30 days, percentile 94%
  16. 3.7
    CVE-2019-11046 Buffer underflow in bc_shift_addsub
    PHP
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  17. 3.7
    CVE-2019-11045 DirectoryIterator class silently truncates after a null byte
    PHP
    EPSS 8.8% chance of exploitation in 30 days, percentile 95%
  18. 3.7
    CVE-2019-11044 link() silently truncates after a null byte on Windows
    PHP
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%
  19. 9.8
    CVE-2011-1939 SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in co…
    PHP
    1 public exploit EPSS 3.9% chance of exploitation in 30 days, percentile 90%
  20. 7.5
    CVE-2019-19246 Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  21. 7.5
    CVE-2010-4657 PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2.
    PHP
    EPSS 1.5% chance of exploitation in 30 days, percentile 75%
  22. 8.7
    CVE-2019-11043 Underflow in PHP-FPM can lead to RCE
    PHP
    kev+ ransomware 3 public exploits EPSS 99.8% chance of exploitation in 30 days, percentile 99.9%
  23. 4.8
    CVE-2019-11042 heap-buffer-overflow on exif_process_user_comment in EXIF extension
    PHP
    EPSS 4.4% chance of exploitation in 30 days, percentile 91%
  24. 4.8
    CVE-2019-11041 heap-buffer-overflow on exif_scan_thumbnail in EXIF extension
    PHP
    EPSS 4.4% chance of exploitation in 30 days, percentile 91%
  25. 7.5
    CVE-2017-7189 main/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen('127.0.0.1:80', 443) as…
    PHP
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  26. 9.8
    CVE-2019-13224 A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial o…
    PHP
    EPSS 4.0% chance of exploitation in 30 days, percentile 90%
  27. 4.8
    CVE-2019-11040 Heap buffer overflow in EXIF extension
    PHP
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  28. 4.2
    CVE-2019-11039 Out-of-bounds read in iconv.c
    PHP
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  29. 3.1
    CVE-2019-11038 Uninitialized read in gdImageCreateFromXbm
    PHP
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  30. 4.8
    CVE-2019-11036 Heap over-read in PHP EXIF extension
    PHP
    EPSS 7.0% chance of exploitation in 30 days, percentile 94%