How many PHP pear CVEs are in CISA KEV?

None of PHP pear's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for PHP pear vulnerabilities?

Yes — 3 of PHP pear's CVEs have a known public exploit.

Which versions of PHP pear are affected?

70 distinct PHP pear versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in PHP pear CVEs?

PHP pear's CVEs most often map to these CWE weakness types: CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

What is the average severity of PHP pear CVEs?

The average CVSS base score across PHP pear's scored CVEs is 5.6.

PHP pear Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: PHP pear vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

PHP pear Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

PHP pear has 6 published CVE records since 2005, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 5.6.

Severity and exploitation

How the CVSS severity of PHP pear's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium2

Low2

In CISA’s Known Exploited Vulnerabilities catalog

None of PHP pear's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3 of PHP pear's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every PHP pear version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.0 <= v <= 1.04 CVEs
1.0.1 <= v <= 1.0.14 CVEs
1.1 <= v <= 1.14 CVEs
1.2 <= v <= 1.24 CVEs
1.2.1 <= v <= 1.2.14 CVEs
1.3 <= v <= 1.34 CVEs
1.3.1 <= v <= 1.3.14 CVEs
1.3.3 <= v <= 1.3.34 CVEs
1.3.3.1 <= v <= 1.3.3.14 CVEs
1.3.4 <= v <= 1.3.44 CVEs
1.3.5 <= v <= 1.3.54 CVEs

Common weakness types

The CWE weakness categories most often found in PHP pear CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many PHP pear CVEs were published each year.

2005

2006

2007

2011

2017

Other PHP products

Browse vulnerabilities for other products by PHP.

php762 CVEs php-src246 CVEs archive tar5 CVEs frankenphp5 CVEs student_enrollment3 CVEs best_courier_management_system2 CVEs pearweb2 CVEs php script index2 CVEs

Frequently asked questions

Common questions about PHP pear vulnerabilities.

How many CVEs does PHP pear have?: PHP pear has 6 published CVE records since 2005.
How many PHP pear CVEs are in CISA KEV?: None of PHP pear's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for PHP pear vulnerabilities?: Yes — 3 of PHP pear's CVEs have a known public exploit.
Which versions of PHP pear are affected?: 70 distinct PHP pear versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in PHP pear CVEs?: PHP pear's CVEs most often map to these CWE weakness types: CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
What is the average severity of PHP pear CVEs?: The average CVSS base score across PHP pear's scored CVEs is 5.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track PHP pear vulnerabilities

Get an alert for each new PHP pear CVE, with AI-written analysis and remediation steps.

Create an account See pricing