{"url":"http://public2.vulnerablecode.io/api/packages/127767?format=json","purl":"pkg:rpm/redhat/php@5.1.6-27.el5_5?arch=3","type":"rpm","namespace":"redhat","name":"php","version":"5.1.6-27.el5_5","qualifiers":{"arch":"3"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46895?format=json","vulnerability_id":"VCID-5cmr-smkx-cbha","summary":"Multiple vulnerabilities were found in PHP, the worst of which\n    leading to remote execution of arbitrary code.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html"},{"reference_url":"http://php-security.org/2010/05/31/mops-2010-060-php-session-serializer-session-data-injection-vulnerability/index.html","reference_id":"","reference_type":"","scores":[],"url":"http://php-security.org/2010/05/31/mops-2010-060-php-session-serializer-session-data-injection-vulnerability/index.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3065.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3065.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2010-3065","reference_id":"","reference_type":"","scores":[{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62313","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62257","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62241","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62251","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62268","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62261","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62206","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62255","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62226","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.62205","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00425","scoring_system":"epss","scoring_elements":"0.6225","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00533","scoring_system":"epss","scoring_elements":"0.67399","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00533","scoring_system":"epss","scoring_elements":"0.67347","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00533","scoring_system":"epss","scoring_elements":"0.67369","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00533","scoring_system":"epss","scoring_elements":"0.6731","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00533","scoring_system":"epss","scoring_elements":"0.67411","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00533","scoring_system":"epss","scoring_elements":"0.67432","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2010-3065"},{"reference_url":"http://secunia.com/advisories/42410","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/42410"},{"reference_url":"http://www.debian.org/security/2010/dsa-2089","reference_id":"","reference_type":"","scores":[],"url":"http://www.debian.org/security/2010/dsa-2089"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html"},{"reference_url":"http://www.vupen.com/english/advisories/2010/3081","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2010/3081"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=619030","reference_id":"619030","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=619030"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3065","reference_id":"CVE-2010-3065","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:P/A:N"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3065"},{"reference_url":"https://security.gentoo.org/glsa/201110-06","reference_id":"GLSA-201110-06","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201110-06"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0919","reference_id":"RHSA-2010:0919","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2010:0919"},{"reference_url":"https://usn.ubuntu.com/989-1/","reference_id":"USN-989-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/989-1/"}],"fixed_packages":[],"aliases":["CVE-2010-3065"],"risk_score":2.2,"exploitability":"0.5","weighted_severity":"4.5","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5cmr-smkx-cbha"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46912?format=json","vulnerability_id":"VCID-73nf-5amu-xkex","summary":"Multiple vulnerabilities were found in PHP, the worst of which\n    leading to remote execution of arbitrary code.","references":[{"reference_url":"http://bugs.php.net/bug.php?id=48230","reference_id":"","reference_type":"","scores":[],"url":"http://bugs.php.net/bug.php?id=48230"},{"reference_url":"http://bugs.php.net/bug.php?id=49687","reference_id":"","reference_type":"","scores":[],"url":"http://bugs.php.net/bug.php?id=49687"},{"reference_url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"},{"reference_url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html"},{"reference_url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html"},{"reference_url":"http://marc.info/?l=bugtraq&m=133469208622507&w=2","reference_id":"","reference_type":"","scores":[],"url":"http://marc.info/?l=bugtraq&m=133469208622507&w=2"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3870.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3870.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2010-3870","reference_id":"","reference_type":"","scores":[{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.70122","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.69981","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.70024","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.70034","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.70015","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.70066","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.70074","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.7005","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.70091","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00619","scoring_system":"epss","scoring_elements":"0.69994","published_at":"2026-04-12T12:55:00Z"},{"value":"0.0071","scoring_system":"epss","scoring_elements":"0.72167","published_at":"2026-04-01T12:55:00Z"},{"value":"0.0071","scoring_system":"epss","scoring_elements":"0.72172","published_at":"2026-04-02T12:55:00Z"},{"value":"0.0071","scoring_system":"epss","scoring_elements":"0.72192","published_at":"2026-04-04T12:55:00Z"},{"value":"0.0071","scoring_system":"epss","scoring_elements":"0.7217","published_at":"2026-04-07T12:55:00Z"},{"value":"0.0071","scoring_system":"epss","scoring_elements":"0.72207","published_at":"2026-04-08T12:55:00Z"},{"value":"0.0071","scoring_system":"epss","scoring_elements":"0.72219","published_at":"2026-04-09T12:55:00Z"},{"value":"0.0071","scoring_system":"epss","scoring_elements":"0.72242","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2010-3870"},{"reference_url":"http://secunia.com/advisories/42410","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/42410"},{"reference_url":"http://secunia.com/advisories/42812","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/42812"},{"reference_url":"http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html","reference_id":"","reference_type":"","scores":[],"url":"http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html"},{"reference_url":"http://support.apple.com/kb/HT4581","reference_id":"","reference_type":"","scores":[],"url":"http://support.apple.com/kb/HT4581"},{"reference_url":"http://svn.php.net/viewvc?view=revision&revision=304959","reference_id":"","reference_type":"","scores":[],"url":"http://svn.php.net/viewvc?view=revision&revision=304959"},{"reference_url":"http://us2.php.net/manual/en/function.utf8-decode.php#83935","reference_id":"","reference_type":"","scores":[],"url":"http://us2.php.net/manual/en/function.utf8-decode.php#83935"},{"reference_url":"http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/","reference_id":"","reference_type":"","scores":[],"url":"http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/"},{"reference_url":"http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf","reference_id":"","reference_type":"","scores":[],"url":"http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf"},{"reference_url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:224","reference_id":"","reference_type":"","scores":[],"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:224"},{"reference_url":"http://www.openwall.com/lists/oss-security/2010/11/02/1","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2010/11/02/1"},{"reference_url":"http://www.openwall.com/lists/oss-security/2010/11/02/11","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2010/11/02/11"},{"reference_url":"http://www.openwall.com/lists/oss-security/2010/11/02/2","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2010/11/02/2"},{"reference_url":"http://www.openwall.com/lists/oss-security/2010/11/02/4","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2010/11/02/4"},{"reference_url":"http://www.openwall.com/lists/oss-security/2010/11/02/6","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2010/11/02/6"},{"reference_url":"http://www.openwall.com/lists/oss-security/2010/11/02/8","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2010/11/02/8"},{"reference_url":"http://www.openwall.com/lists/oss-security/2010/11/03/1","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2010/11/03/1"},{"reference_url":"http://www.php.net/ChangeLog-5.php","reference_id":"","reference_type":"","scores":[],"url":"http://www.php.net/ChangeLog-5.php"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2011-0195.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2011-0195.html"},{"reference_url":"http://www.securityfocus.com/bid/44605","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/44605"},{"reference_url":"http://www.securitytracker.com/id?1024797","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id?1024797"},{"reference_url":"http://www.ubuntu.com/usn/USN-1042-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-1042-1"},{"reference_url":"http://www.vupen.com/english/advisories/2010/3081","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2010/3081"},{"reference_url":"http://www.vupen.com/english/advisories/2011/0020","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2011/0020"},{"reference_url":"http://www.vupen.com/english/advisories/2011/0021","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2011/0021"},{"reference_url":"http://www.vupen.com/english/advisories/2011/0077","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2011/0077"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=649056","reference_id":"649056","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=649056"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3870","reference_id":"CVE-2010-3870","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:P"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3870"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/remote/34950.php","reference_id":"CVE-2010-3870;OSVDB-69230","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/remote/34950.php"},{"reference_url":"https://www.securityfocus.com/bid/44605/info","reference_id":"CVE-2010-3870;OSVDB-69230","reference_type":"exploit","scores":[],"url":"https://www.securityfocus.com/bid/44605/info"},{"reference_url":"https://security.gentoo.org/glsa/201110-06","reference_id":"GLSA-201110-06","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201110-06"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0919","reference_id":"RHSA-2010:0919","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2010:0919"},{"reference_url":"https://access.redhat.com/errata/RHSA-2011:0195","reference_id":"RHSA-2011:0195","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2011:0195"},{"reference_url":"https://usn.ubuntu.com/1042-1/","reference_id":"USN-1042-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1042-1/"}],"fixed_packages":[],"aliases":["CVE-2010-3870"],"risk_score":10.0,"exploitability":"2.0","weighted_severity":"6.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-73nf-5amu-xkex"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46845?format=json","vulnerability_id":"VCID-f1qk-tx2z-dbhk","summary":"Multiple vulnerabilities were found in PHP, the worst of which\n    leading to remote execution of arbitrary code.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html"},{"reference_url":"http://marc.info/?l=bugtraq&m=130331363227777&w=2","reference_id":"","reference_type":"","scores":[],"url":"http://marc.info/?l=bugtraq&m=130331363227777&w=2"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1917.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1917.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2010-1917","reference_id":"","reference_type":"","scores":[{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82201","published_at":"2026-05-09T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82001","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82012","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82035","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82029","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82056","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82063","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82082","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82073","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82065","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.821","published_at":"2026-04-18T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82102","published_at":"2026-04-21T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82124","published_at":"2026-04-24T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82135","published_at":"2026-04-26T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82139","published_at":"2026-04-29T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82156","published_at":"2026-05-05T12:55:00Z"},{"value":"0.01661","scoring_system":"epss","scoring_elements":"0.82178","published_at":"2026-05-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2010-1917"},{"reference_url":"http://secunia.com/advisories/40860","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/40860"},{"reference_url":"http://secunia.com/advisories/42410","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/42410"},{"reference_url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/58585","reference_id":"","reference_type":"","scores":[],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/58585"},{"reference_url":"http://www.debian.org/security/2010/dsa-2089","reference_id":"","reference_type":"","scores":[],"url":"http://www.debian.org/security/2010/dsa-2089"},{"reference_url":"http://www.php-security.org/2010/05/11/mops-2010-021-php-fnmatch-stack-exhaustion-vulnerability/index.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.php-security.org/2010/05/11/mops-2010-021-php-fnmatch-stack-exhaustion-vulnerability/index.html"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html"},{"reference_url":"http://www.vupen.com/english/advisories/2010/3081","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2010/3081"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=617232","reference_id":"617232","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=617232"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1917","reference_id":"CVE-2010-1917","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:N/A:P"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1917"},{"reference_url":"https://security.gentoo.org/glsa/201110-06","reference_id":"GLSA-201110-06","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201110-06"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0919","reference_id":"RHSA-2010:0919","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2010:0919"},{"reference_url":"https://usn.ubuntu.com/989-1/","reference_id":"USN-989-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/989-1/"}],"fixed_packages":[],"aliases":["CVE-2010-1917"],"risk_score":2.2,"exploitability":"0.5","weighted_severity":"4.5","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-f1qk-tx2z-dbhk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46805?format=json","vulnerability_id":"VCID-n146-xs1x-6ugw","summary":"Multiple vulnerabilities were found in PHP, the worst of which\n    leading to remote execution of arbitrary code.","references":[{"reference_url":"http://bugs.php.net/bug.php?id=49687","reference_id":"","reference_type":"","scores":[],"url":"http://bugs.php.net/bug.php?id=49687"},{"reference_url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html"},{"reference_url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5016.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5016.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2009-5016","reference_id":"","reference_type":"","scores":[{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87599","published_at":"2026-05-09T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87462","published_at":"2026-04-01T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87472","published_at":"2026-04-02T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87486","published_at":"2026-04-04T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87488","published_at":"2026-04-07T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87508","published_at":"2026-04-08T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87514","published_at":"2026-04-09T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87526","published_at":"2026-04-11T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87521","published_at":"2026-04-12T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87518","published_at":"2026-04-13T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87532","published_at":"2026-04-21T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87534","published_at":"2026-04-18T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87548","published_at":"2026-04-24T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87555","published_at":"2026-04-26T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87553","published_at":"2026-04-29T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87567","published_at":"2026-05-05T12:55:00Z"},{"value":"0.03454","scoring_system":"epss","scoring_elements":"0.87581","published_at":"2026-05-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2009-5016"},{"reference_url":"http://secunia.com/advisories/42410","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/42410"},{"reference_url":"http://secunia.com/advisories/42812","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/42812"},{"reference_url":"http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html","reference_id":"","reference_type":"","scores":[],"url":"http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html"},{"reference_url":"http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf","reference_id":"","reference_type":"","scores":[],"url":"http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2011-0195.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2011-0195.html"},{"reference_url":"http://www.securityfocus.com/bid/44889","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/44889"},{"reference_url":"http://www.ubuntu.com/usn/USN-1042-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.ubuntu.com/usn/USN-1042-1"},{"reference_url":"http://www.vupen.com/english/advisories/2010/3081","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2010/3081"},{"reference_url":"http://www.vupen.com/english/advisories/2011/0020","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2011/0020"},{"reference_url":"http://www.vupen.com/english/advisories/2011/0021","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2011/0021"},{"reference_url":"http://www.vupen.com/english/advisories/2011/0077","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2011/0077"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=652836","reference_id":"652836","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=652836"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2009-5016","reference_id":"CVE-2009-5016","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:P"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-5016"},{"reference_url":"https://security.gentoo.org/glsa/201110-06","reference_id":"GLSA-201110-06","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201110-06"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0919","reference_id":"RHSA-2010:0919","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2010:0919"},{"reference_url":"https://access.redhat.com/errata/RHSA-2011:0195","reference_id":"RHSA-2011:0195","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2011:0195"},{"reference_url":"https://usn.ubuntu.com/1042-1/","reference_id":"USN-1042-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1042-1/"}],"fixed_packages":[],"aliases":["CVE-2009-5016"],"risk_score":3.0,"exploitability":"0.5","weighted_severity":"6.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n146-xs1x-6ugw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/87849?format=json","vulnerability_id":"VCID-nwah-hqg5-q7e2","summary":"php: NULL pointer dereference in XML-RPC extension","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0397.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0397.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2010-0397","reference_id":"","reference_type":"","scores":[{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92058","published_at":"2026-04-01T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92064","published_at":"2026-04-02T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92072","published_at":"2026-04-04T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92077","published_at":"2026-04-07T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92089","published_at":"2026-04-08T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92092","published_at":"2026-04-13T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92096","published_at":"2026-04-12T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92103","published_at":"2026-04-16T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92101","published_at":"2026-04-18T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92099","published_at":"2026-04-21T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92104","published_at":"2026-04-26T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92102","published_at":"2026-04-29T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92112","published_at":"2026-05-05T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92126","published_at":"2026-05-07T12:55:00Z"},{"value":"0.07996","scoring_system":"epss","scoring_elements":"0.92135","published_at":"2026-05-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2010-0397"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=573779","reference_id":"573779","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=573779"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/33755.php","reference_id":"CVE-2010-0397;OSVDB-63078","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/33755.php"},{"reference_url":"https://www.securityfocus.com/bid/38708/info","reference_id":"CVE-2010-0397;OSVDB-63078","reference_type":"exploit","scores":[],"url":"https://www.securityfocus.com/bid/38708/info"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0919","reference_id":"RHSA-2010:0919","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2010:0919"},{"reference_url":"https://usn.ubuntu.com/989-1/","reference_id":"USN-989-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/989-1/"}],"fixed_packages":[],"aliases":["CVE-2010-0397"],"risk_score":0.2,"exploitability":"2.0","weighted_severity":"0.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nwah-hqg5-q7e2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46880?format=json","vulnerability_id":"VCID-yk8n-vbt4-6ycr","summary":"Multiple vulnerabilities were found in PHP, the worst of which\n    leading to remote execution of arbitrary code.","references":[{"reference_url":"http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html"},{"reference_url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html"},{"reference_url":"http://marc.info/?l=bugtraq&m=130331363227777&w=2","reference_id":"","reference_type":"","scores":[],"url":"http://marc.info/?l=bugtraq&m=130331363227777&w=2"},{"reference_url":"http://marc.info/?l=bugtraq&m=133469208622507&w=2","reference_id":"","reference_type":"","scores":[],"url":"http://marc.info/?l=bugtraq&m=133469208622507&w=2"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2531.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2531.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2010-2531","reference_id":"","reference_type":"","scores":[{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.90487","published_at":"2026-05-09T12:55:00Z"},{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.90423","published_at":"2026-04-13T12:55:00Z"},{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.90439","published_at":"2026-04-16T12:55:00Z"},{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.90438","published_at":"2026-04-18T12:55:00Z"},{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.90436","published_at":"2026-04-21T12:55:00Z"},{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.9045","published_at":"2026-04-26T12:55:00Z"},{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.90446","published_at":"2026-04-29T12:55:00Z"},{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.90457","published_at":"2026-05-05T12:55:00Z"},{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.90475","published_at":"2026-05-07T12:55:00Z"},{"value":"0.0571","scoring_system":"epss","scoring_elements":"0.9043","published_at":"2026-04-12T12:55:00Z"},{"value":"0.06685","scoring_system":"epss","scoring_elements":"0.91187","published_at":"2026-04-01T12:55:00Z"},{"value":"0.06685","scoring_system":"epss","scoring_elements":"0.91192","published_at":"2026-04-02T12:55:00Z"},{"value":"0.06685","scoring_system":"epss","scoring_elements":"0.912","published_at":"2026-04-04T12:55:00Z"},{"value":"0.06685","scoring_system":"epss","scoring_elements":"0.91208","published_at":"2026-04-07T12:55:00Z"},{"value":"0.06685","scoring_system":"epss","scoring_elements":"0.91221","published_at":"2026-04-08T12:55:00Z"},{"value":"0.06685","scoring_system":"epss","scoring_elements":"0.91228","published_at":"2026-04-09T12:55:00Z"},{"value":"0.06685","scoring_system":"epss","scoring_elements":"0.91234","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2010-2531"},{"reference_url":"http://secunia.com/advisories/42410","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/42410"},{"reference_url":"http://support.apple.com/kb/HT4312","reference_id":"","reference_type":"","scores":[],"url":"http://support.apple.com/kb/HT4312"},{"reference_url":"http://support.apple.com/kb/HT4435","reference_id":"","reference_type":"","scores":[],"url":"http://support.apple.com/kb/HT4435"},{"reference_url":"http://svn.php.net/viewvc/php/php-src/trunk/ext/standard/tests/general_functions/var_export_error2.phpt?view=log&pathrev=301143","reference_id":"","reference_type":"","scores":[],"url":"http://svn.php.net/viewvc/php/php-src/trunk/ext/standard/tests/general_functions/var_export_error2.phpt?view=log&pathrev=301143"},{"reference_url":"http://www.debian.org/security/2011/dsa-2266","reference_id":"","reference_type":"","scores":[],"url":"http://www.debian.org/security/2011/dsa-2266"},{"reference_url":"http://www.openwall.com/lists/oss-security/2010/07/13/1","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2010/07/13/1"},{"reference_url":"http://www.openwall.com/lists/oss-security/2010/07/16/3","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2010/07/16/3"},{"reference_url":"http://www.php.net/archive/2010.php#id2010-07-22-1","reference_id":"","reference_type":"","scores":[],"url":"http://www.php.net/archive/2010.php#id2010-07-22-1"},{"reference_url":"http://www.php.net/archive/2010.php#id2010-07-22-2","reference_id":"","reference_type":"","scores":[],"url":"http://www.php.net/archive/2010.php#id2010-07-22-2"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html"},{"reference_url":"http://www.vupen.com/english/advisories/2010/3081","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2010/3081"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=617673","reference_id":"617673","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=617673"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2531","reference_id":"CVE-2010-2531","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:N/A:N"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2531"},{"reference_url":"https://security.gentoo.org/glsa/201110-06","reference_id":"GLSA-201110-06","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201110-06"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0919","reference_id":"RHSA-2010:0919","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2010:0919"},{"reference_url":"https://usn.ubuntu.com/989-1/","reference_id":"USN-989-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/989-1/"}],"fixed_packages":[],"aliases":["CVE-2010-2531"],"risk_score":1.9,"exploitability":"0.5","weighted_severity":"3.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yk8n-vbt4-6ycr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46809?format=json","vulnerability_id":"VCID-zj1e-4gxx-1qbd","summary":"Multiple vulnerabilities were found in PHP, the worst of which\n    leading to remote execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1128.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1128.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2010-1128","reference_id":"","reference_type":"","scores":[{"value":"0.04685","scoring_system":"epss","scoring_elements":"0.89387","published_at":"2026-05-05T12:55:00Z"},{"value":"0.04685","scoring_system":"epss","scoring_elements":"0.89406","published_at":"2026-05-07T12:55:00Z"},{"value":"0.04685","scoring_system":"epss","scoring_elements":"0.89419","published_at":"2026-05-09T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89465","published_at":"2026-04-07T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89481","published_at":"2026-04-08T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89484","published_at":"2026-04-09T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89493","published_at":"2026-04-11T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89491","published_at":"2026-04-12T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89486","published_at":"2026-04-13T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89448","published_at":"2026-04-01T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89501","published_at":"2026-04-18T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89498","published_at":"2026-04-21T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89513","published_at":"2026-04-24T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89517","published_at":"2026-04-26T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89518","published_at":"2026-04-29T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.895","published_at":"2026-04-16T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89452","published_at":"2026-04-02T12:55:00Z"},{"value":"0.04795","scoring_system":"epss","scoring_elements":"0.89463","published_at":"2026-04-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2010-1128"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=577582","reference_id":"577582","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=577582"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/33677.txt","reference_id":"CVE-2010-1128;OSVDB-63323","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/33677.txt"},{"reference_url":"https://www.securityfocus.com/bid/38430/info","reference_id":"CVE-2010-1128;OSVDB-63323","reference_type":"exploit","scores":[],"url":"https://www.securityfocus.com/bid/38430/info"},{"reference_url":"https://security.gentoo.org/glsa/201110-06","reference_id":"GLSA-201110-06","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201110-06"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0919","reference_id":"RHSA-2010:0919","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2010:0919"},{"reference_url":"https://usn.ubuntu.com/989-1/","reference_id":"USN-989-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/989-1/"}],"fixed_packages":[],"aliases":["CVE-2010-1128"],"risk_score":null,"exploitability":"2.0","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zj1e-4gxx-1qbd"}],"fixing_vulnerabilities":[],"risk_score":"10.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/php@5.1.6-27.el5_5%3Farch=3"}