Vulnerabilities
Summary — last 7 days
New vulnerabilities4,653▼ 633 vs. last week
Critical / high1,807▼ 1,271 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)780▲ 682 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.5) | 0.68% | — | Ne-lexa Php-zipAI | 7/23/2026 | 7/24/2026 | A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file src/ZipFile.php of the component ZIP Handler. Performing a manipulation of the argument entryName results in path traversal. It is possible to initiate the attack remotely. The exploit is now public… | |
| Analyzed | Critical (9.8) | 20% | Exploit | PHPPierrejoye PHP ZIP | 3/10/2007 | 6/16/2026 | Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or blog pingback. |