Vulnerabilities

Summary — last 7 days

New vulnerabilities4,547▼ 809 vs. last week
Critical / high1,774▼ 1,316 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)760▲ 661 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
AnalyzedCritical (9.8)20%ExploitPHPPierrejoye PHP ZIP3/10/20076/16/2026
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or blog pingback.