Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 2 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

PHP CRITICAL 9.8

CVE-2024-4577 KEVEPSS 100%

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to us…

Fix: 8.1.29 / 8.2.20+

Fix from $2,300 2024-06-09

Archive Tar HIGH 7.5

CVE-2020-36193 KEVEPSS 71%

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue …

Fix: 7.78 / 8.9.13+

Fix from $1,950 2021-01-18

Archive Tar HIGH 7.8

CVE-2020-28949 KEVEPSS 85%

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to o…

Fix: 1.4.12 / 7.75+

Fix from $1,950 2020-11-19

PHP CRITICAL 9.8

CVE-2019-11043 KEVEPSS 99%

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM modu…

Fix: 7.1.33 / 7.2.24+

Fix from $2,300 2019-10-28

PHP CRITICAL 9.8

CVE-2012-1823 KEVEPSS 100%

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query string…

Fix: 5.3.12 / 5.4.2+

Fix from $2,300 2012-05-11