PEAR

Records24All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

PEAR records in CISA KEV

TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CRITICAL 93KEV 2022-08-25 TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL 90KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records

Pearweb 9 records MEDIUM Pear 3 records MEDIUM Structures Datagrid Datasource Mdb2 2 records LOW Crypt Gpg 1 record LOW Html Ajax 1 record MEDIUM Mail 1 record LOW Pear Archive Tar 1 record LOW Pear Archive Zip 1 record LOW

Records

1 record in Crypt Gpg · all components

TI-2022-08752 CVE-2022-24953 · GHSA-59x4-67mh-px54

The Crypt_GPG extension before 1.6.7 for PHP does not prevent additional options in GPG…

LOW 26

The Crypt_GPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0085 Published 2022-02-17 Fixed in 1.6.7 CWE-88

Open these records in search →

Critical	7
High	7
Medium	10
Low	0
No CVSS	0