SC
Product
Software Collections
On CISA KEVExploited in the wildRansomware-linked
137
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 37Medium 85Low 3
Watch
Add Software Collections to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11043 RansomwareIn wildKEV | 9.8 | Oct 28 | Underflow in PHP-FPM can lead to RCE Affected: 1.0 |
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 1.0 |
| CVE-2019-10196 | 9.8 | Mar 19 | A flaw was found in http-proxy-agent, prior to version 2.1.0 Affected: All versions, or not specified |
| CVE-2014-4650 | 9.8 | Feb 20 | The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script… Affected: All versions, or not specified |
| CVE-2019-15605 | 9.8 | Feb 7 | HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed Affected: 1.0 |
| CVE-2019-17570 | 9.8 | Jan 23 | An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library Affected: 1.0 |
| CVE-2015-7545 | 9.8 | Apr 13 | The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly… Affected: 1.0 |
| CVE-2019-11040 | 9.1 | Jun 19 | When PHP EXIF extension is parsing EXIF information from an image, e.g Affected: 1.0 |
| CVE-2019-11039 | 9.1 | Jun 19 | Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when… Affected: 1.0 |
| CVE-2019-11036 | 9.1 | May 3 | When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in… Affected: 1.0 |
| CVE-2019-11035 | 9.1 | Apr 18 | When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in… Affected: 1.0 |
| CVE-2019-11034 | 9.1 | Apr 18 | When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in… Affected: 1.0 |
Showing 12