Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/935089?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "type": "deb", "namespace": "debian", "name": "php7.4", "version": "0", "qualifiers": { "distro": "bullseye" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "7.4.2-7", "latest_non_vulnerable_version": "7.4.33-1+deb11u10", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/48773?format=api", "vulnerability_id": "VCID-2tux-e678-hubz", "summary": "Multiple vulnerabilities have been discovered in PHP, the worst of which could result in local root privilege escalation.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31627.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31627.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31627", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.3976", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39782", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39701", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39755", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39769", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39779", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39743", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39727", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39777", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39748", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00181", "scoring_system": "epss", "scoring_elements": "0.39664", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31627" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107018", "reference_id": "2107018", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107018" }, { "reference_url": "https://security.gentoo.org/glsa/202209-20", "reference_id": "GLSA-202209-20", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202209-20" }, { "reference_url": "https://usn.ubuntu.com/5530-1/", "reference_id": "USN-5530-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5530-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2022-31627" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2tux-e678-hubz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/76926?format=api", "vulnerability_id": "VCID-32yk-5b4h-4bfv", "summary": "php: Fail to Escape Arguments Properly in Microsoft Windows", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-1874.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-1874.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-1874", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.63376", "scoring_system": "epss", "scoring_elements": "0.98394", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.63376", "scoring_system": "epss", "scoring_elements": "0.98412", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.63376", "scoring_system": "epss", "scoring_elements": "0.98407", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.63376", "scoring_system": "epss", "scoring_elements": "0.98404", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.63376", "scoring_system": "epss", "scoring_elements": "0.98403", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.63376", "scoring_system": "epss", "scoring_elements": "0.984", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.63376", "scoring_system": "epss", "scoring_elements": "0.98397", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-1874" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2024/06/07/1", "reference_id": "1", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-29T13:05:18Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2024/06/07/1" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "reference_id": "11", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-29T13:05:18Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267262", "reference_id": "2267262", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267262" }, { "reference_url": "https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7", "reference_id": "GHSA-pc52-254m-w9w7", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-29T13:05:18Z/" } ], "url": "https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240510-0009/", "reference_id": "ntap-20240510-0009", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-29T13:05:18Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240510-0009/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/", "reference_id": "PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-29T13:05:18Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/", "reference_id": "W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-29T13:05:18Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2024-1874" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-32yk-5b4h-4bfv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/65494?format=api", "vulnerability_id": "VCID-46m1-33z3-ruhk", "summary": "php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14180.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14180.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-14180", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.10092", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.10147", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.10167", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.1004", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.10018", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.10155", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.10051", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.10127", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.10187", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.10227", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-14180" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123574", "reference_id": "1123574", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123574" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425627", "reference_id": "2425627", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425627" }, { "reference_url": "https://github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwj", "reference_id": "GHSA-8xr5-qppj-gvwj", "reference_type": "", "scores": [ { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-29T15:59:59Z/" } ], "url": "https://github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwj" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1169", "reference_id": "RHSA-2026:1169", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1169" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1185", "reference_id": "RHSA-2026:1185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1187", "reference_id": "RHSA-2026:1187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1187" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1190", "reference_id": "RHSA-2026:1190", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1190" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1409", "reference_id": "RHSA-2026:1409", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1409" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1412", "reference_id": "RHSA-2026:1412", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1412" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1429", "reference_id": "RHSA-2026:1429", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1429" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1628", "reference_id": "RHSA-2026:1628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3713", "reference_id": "RHSA-2026:3713", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3713" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7614", "reference_id": "RHSA-2026:7614", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7614" }, { "reference_url": "https://usn.ubuntu.com/7953-1/", "reference_id": "USN-7953-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7953-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2025-14180" ], "risk_score": 3.7, "exploitability": "0.5", "weighted_severity": "7.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-46m1-33z3-ruhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42468?format=api", "vulnerability_id": "VCID-5jts-46jw-tfdp", "summary": "Multiple vulnerabilities have been discovered in PHP, the worst of which can lead to a denial of service.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-5585.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-5585.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-5585", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75312", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75226", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75257", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75234", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75276", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75287", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75308", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75286", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75275", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75314", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00874", "scoring_system": "epss", "scoring_elements": "0.75321", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-5585" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2024/06/07/1", "reference_id": "1", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-07-16T17:52:45Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2024/06/07/1" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2291311", "reference_id": "2291311", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2291311" }, { "reference_url": "https://github.com/php/php-src/security/advisories/GHSA-9fcc-425m-g385", "reference_id": "GHSA-9fcc-425m-g385", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-07-16T17:52:45Z/" } ], "url": "https://github.com/php/php-src/security/advisories/GHSA-9fcc-425m-g385" }, { "reference_url": "https://security.gentoo.org/glsa/202408-32", "reference_id": "GLSA-202408-32", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202408-32" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240726-0002/", "reference_id": "ntap-20240726-0002", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-07-16T17:52:45Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240726-0002/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/", "reference_id": "PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-07-16T17:52:45Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/", "reference_id": "W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-07-16T17:52:45Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2024-5585" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5jts-46jw-tfdp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42464?format=api", "vulnerability_id": "VCID-qymx-je6t-23a6", "summary": "Multiple vulnerabilities have been discovered in PHP, the worst of which can lead to a denial of service.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-2757.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-2757.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-2757", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.70208", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.70166", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.70182", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.70205", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.7019", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.70178", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.7022", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.70229", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.70126", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.70141", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00625", "scoring_system": "epss", "scoring_elements": "0.70118", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-2757" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "reference_id": "11", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-29T11:27:03Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275068", "reference_id": "2275068", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275068" }, { "reference_url": "https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq", "reference_id": "GHSA-fjp9-9hwx-59fq", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-29T11:27:03Z/" } ], "url": "https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq" }, { "reference_url": "https://security.gentoo.org/glsa/202408-32", "reference_id": "GLSA-202408-32", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202408-32" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240510-0011/", "reference_id": "ntap-20240510-0011", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-29T11:27:03Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240510-0011/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2024-2757" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qymx-je6t-23a6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/65492?format=api", "vulnerability_id": "VCID-rh5h-at8n-bfdj", "summary": "php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14177.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14177.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-14177", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18706", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18486", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18514", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18455", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18464", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18761", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18477", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18557", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.1861", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18613", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18566", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-14177" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123574", "reference_id": "1123574", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123574" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425626", "reference_id": "2425626", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425626" }, { "reference_url": "https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7", "reference_id": "GHSA-3237-qqm7-mfv7", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-29T16:01:25Z/" } ], "url": "https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1409", "reference_id": "RHSA-2026:1409", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1409" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1412", "reference_id": "RHSA-2026:1412", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1412" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1429", "reference_id": "RHSA-2026:1429", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1429" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1628", "reference_id": "RHSA-2026:1628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2470", "reference_id": "RHSA-2026:2470", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2470" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2799", "reference_id": "RHSA-2026:2799", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2799" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7614", "reference_id": "RHSA-2026:7614", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7614" }, { "reference_url": "https://usn.ubuntu.com/7953-1/", "reference_id": "USN-7953-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7953-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2025-14177" ], "risk_score": 2.9, "exploitability": "0.5", "weighted_severity": "5.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rh5h-at8n-bfdj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/239979?format=api", "vulnerability_id": "VCID-tawz-4cft-97bd", "summary": "In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS permissions.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21706", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67225", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67125", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67162", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67186", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67213", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67226", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67245", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67232", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67198", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67233", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21706" }, { "reference_url": "https://security.archlinux.org/AVG-2420", "reference_id": "AVG-2420", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2420" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2021-21706" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tawz-4cft-97bd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/73710?format=api", "vulnerability_id": "VCID-vfx1-jn3w-1fb9", "summary": "php: PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-8926.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-8926.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8926", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.85921", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.85907", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.85925", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.8593", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.85851", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.85868", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.85872", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.85891", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.859", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.85915", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02711", "scoring_system": "epss", "scoring_elements": "0.85913", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-8926" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2317050", "reference_id": "2317050", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2317050" }, { "reference_url": "https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq", "reference_id": "GHSA-p99j-rfp4-xqvq", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-08T12:55:27Z/" } ], "url": "https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2024-8926" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vfx1-jn3w-1fb9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42466?format=api", "vulnerability_id": "VCID-x2s3-ku1g-gfgh", "summary": "Multiple vulnerabilities have been discovered in PHP, the worst of which can lead to a denial of service.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-4577.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-4577.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4577", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.94374", "scoring_system": "epss", "scoring_elements": "0.99967", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.94374", "scoring_system": "epss", "scoring_elements": "0.99966", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.94393", "scoring_system": "epss", "scoring_elements": "0.99972", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4577" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2024/06/07/1", "reference_id": "1", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2024/06/07/1" }, { "reference_url": "https://github.com/rapid7/metasploit-framework/pull/19247", "reference_id": "19247", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://github.com/rapid7/metasploit-framework/pull/19247" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2291281", "reference_id": "2291281", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2291281" }, { "reference_url": "https://isc.sans.edu/diary/30994", "reference_id": "30994", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://isc.sans.edu/diary/30994" }, { "reference_url": "https://www.php.net/ChangeLog-8.php#8.1.29", "reference_id": "ChangeLog-8.php#8.1.29", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://www.php.net/ChangeLog-8.php#8.1.29" }, { "reference_url": "https://www.php.net/ChangeLog-8.php#8.2.20", "reference_id": "ChangeLog-8.php#8.2.20", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://www.php.net/ChangeLog-8.php#8.2.20" }, { "reference_url": "https://www.php.net/ChangeLog-8.php#8.3.8", "reference_id": "ChangeLog-8.php#8.3.8", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://www.php.net/ChangeLog-8.php#8.3.8" }, { "reference_url": "https://github.com/11whoami99/CVE-2024-4577", "reference_id": "CVE-2024-4577", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://github.com/11whoami99/CVE-2024-4577" }, { "reference_url": "https://github.com/watchtowrlabs/CVE-2024-4577", "reference_id": "CVE-2024-4577", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://github.com/watchtowrlabs/CVE-2024-4577" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/52331.py", "reference_id": "CVE-2024-4577", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/52331.py" }, { "reference_url": "https://github.com/xcanwin/CVE-2024-4577-PHP-RCE", "reference_id": "CVE-2024-4577-PHP-RCE", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://github.com/xcanwin/CVE-2024-4577-PHP-RCE" }, { "reference_url": "https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html", "reference_id": "cve-2024-4577-yet-another-php-rce.html", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html" }, { "reference_url": "https://github.com/php/php-src/security/advisories/GHSA-3qgc-jrrr-25jv", "reference_id": "GHSA-3qgc-jrrr-25jv", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://github.com/php/php-src/security/advisories/GHSA-3qgc-jrrr-25jv" }, { "reference_url": "https://security.gentoo.org/glsa/202408-32", "reference_id": "GLSA-202408-32", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202408-32" }, { "reference_url": "https://www.imperva.com/blog/imperva-protects-against-critical-php-vulnerability-cve-2024-4577/", "reference_id": "imperva-protects-against-critical-php-vulnerability-cve-2024-4577", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://www.imperva.com/blog/imperva-protects-against-critical-php-vulnerability-cve-2024-4577/" }, { "reference_url": "https://labs.watchtowr.com/no-way-php-strikes-again-cve-2024-4577/", "reference_id": "no-way-php-strikes-again-cve-2024-4577", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://labs.watchtowr.com/no-way-php-strikes-again-cve-2024-4577/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0008/", "reference_id": "ntap-20240621-0008", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0008/" }, { "reference_url": "https://arstechnica.com/security/2024/06/php-vulnerability-allows-attackers-to-run-malicious-code-on-windows-servers/", "reference_id": "php-vulnerability-allows-attackers-to-run-malicious-code-on-windows-servers", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://arstechnica.com/security/2024/06/php-vulnerability-allows-attackers-to-run-malicious-code-on-windows-servers/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/", "reference_id": "PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/" }, { "reference_url": "https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/", "reference_id": "security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/", "reference_id": "W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/" }, { "reference_url": "https://cert.be/en/advisory/warning-php-remote-code-execution-patch-immediately", "reference_id": "warning-php-remote-code-execution-patch-immediately", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-06-15T03:55:28Z/" } ], "url": "https://cert.be/en/advisory/warning-php-remote-code-execution-patch-immediately" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2024-4577" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x2s3-ku1g-gfgh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43014?format=api", "vulnerability_id": "VCID-zjc4-mxte-f7hz", "summary": "Multiple vulnerabilities have been found in PHP, the worst of which\n could result in the execution of arbitrary shell commands.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7061.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7061.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-7061", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.85967", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.85978", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.85994", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.86013", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.86023", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.86037", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.86035", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.8603", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.86048", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.86053", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02767", "scoring_system": "epss", "scoring_elements": "0.86044", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-7061" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1808529", "reference_id": "1808529", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1808529" }, { "reference_url": "https://security.gentoo.org/glsa/202003-57", "reference_id": "GLSA-202003-57", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202003-57" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935089?format=api", "purl": "pkg:deb/debian/php7.4@0?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }, { "url": "http://public2.vulnerablecode.io/api/packages/935086?format=api", "purl": "pkg:deb/debian/php7.4@7.4.33-1%2Bdeb11u5?distro=bullseye", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@7.4.33-1%252Bdeb11u5%3Fdistro=bullseye" } ], "aliases": [ "CVE-2020-7061" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zjc4-mxte-f7hz" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/php7.4@0%3Fdistro=bullseye" }