PHP

Records778All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical167CVSS 9.0–10.0

CVSS high256CVSS 7.0–8.9

Exploited now

PHP records in CISA KEV

TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2016-08118 PHPMailer Command Injection Vulnerability CRITICAL 100KEV 2025-07-07 TI-2024-04260 PHP-CGI OS Command Injection Vulnerability CRITICAL 100KEV 2024-06-12 TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CRITICAL 93KEV 2022-08-25 TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL 90KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records

Php 740 records CRITICAL Pear 5 records MEDIUM Archive Tar 4 records CRITICAL Frankenphp 2 records MEDIUM Pearweb 2 records MEDIUM Php Script Index 2 records LOW Animated Smiley Generator 1 record LOW Ar Memberscript 1 record LOW

Records

2 records in Pearweb · all components

TI-2022-10286 CVE-2022-27158 · GHSA-jwfx-6h4j-v289

pearweb < 1.32 suffers from Deserialization of Untrusted Data.

MEDIUM 45

pearweb < 1.32 suffers from Deserialization of Untrusted Data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01288 Published 2022-04-15 No fix listed CWE-502

TI-2022-10285 CVE-2022-27157 · GHSA-2mfv-2f5w-p9fq

pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php.

MEDIUM 44

pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.012 Published 2022-04-15 No fix listed CWE-640

Open these records in search →