PEAR

Records24All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

PEAR records in CISA KEV

TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CRITICAL 93KEV 2022-08-25 TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL 90KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records

Pearweb 9 records MEDIUM Pear 3 records MEDIUM Structures Datagrid Datasource Mdb2 2 records LOW Crypt Gpg 1 record LOW Html Ajax 1 record MEDIUM Mail 1 record LOW Pear Archive Tar 1 record LOW Pear Archive Zip 1 record LOW

Records

2 records in Structures Datagrid Datasource Mdb2 · all components

TI-2007-03519 CVE-2007-3628 · GHSA-hp5x-r3h5-p375

Unspecified vulnerability in the fetch function in MDB2.php in PEAR…

LOW 25

Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.00982 Published 2007-07-09 No fix listed

TI-2007-05673 CVE-2007-5934 · GHSA-g5r5-mcgg-8jvc

The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL…

LOW 23

The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01621 Published 2007-11-13 No fix listed CWE-200

Open these records in search →

Critical	7
High	7
Medium	10
Low	0
No CVSS	0