PE
Vendor
Pear
24
CVEs
2
On KEV
0
New 30D
Products
AR7.8
Archive_Tar
PEAR
2 CVEs2 on KEV0 new
PE9.8
pearweb
pear
9 CVEs0 on KEV0 new
PE–
Pear
Pear
3 CVEs0 on KEV0 new
SD–
Structures Datagrid Datasource Mdb2
Pear
2 CVEs0 on KEV0 new
CG5.3
Crypt Gpg
Pear
1 CVEs0 on KEV0 new
HA9.8
Html Ajax
Pear
1 CVEs0 on KEV0 new
MA–
Mail
Pear
1 CVEs0 on KEV0 new
PA–
Pear Archive Tar
Pear
1 CVEs0 on KEV0 new
PA–
Pear Archive Zip
Pear
1 CVEs0 on KEV0 new
PL–
Pear Liveuser
Pear
1 CVEs0 on KEV0 new
TP–
Text Password
Pear
1 CVEs0 on KEV0 new
XR–
Xml Rpc
Pear
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-25241 | PE pearweb pear | 9.8 | Feb 3 | PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint |
| CVE-2026-25240 | PE pearweb pear | 9.8 | Feb 3 | PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter |
| CVE-2026-25239 | PE pearweb pear | 7.5 | Feb 3 | PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename |
| CVE-2026-25238 | PE pearweb pear | 9.8 | Feb 3 | PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation |
| CVE-2026-25237 | PE pearweb pear | 9.8 | Feb 3 | PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails |
| CVE-2026-25236 | PE pearweb pear | 9.8 | Feb 3 | PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution |
| CVE-2026-25235 | PE pearweb pear | 7.5 | Feb 3 | PEAR Has a Predictable Verification Hash in Election Account Requests |
| CVE-2026-25234 | PE pearweb pear | 9.8 | Feb 3 | PEAR is Vulnerable to SQL Injection in Category Deletion |
| CVE-2026-25233 | PE pearweb pear | 9.1 | Feb 3 | PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug |
| CVE-2022-24953 | CG Crypt Gpg Pear | 5.3 | Feb 17 | The Crypt_GPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions |
| CVE-2020-36193 In wildKEV | AR Archive_Tar PEAR | 7.5 | Jan 18 | PEAR Archive_Tar Improper Link Resolution Vulnerability |
| CVE-2020-28949 In wildKEV | AR Archive_Tar PEAR | 7.8 | Nov 19 | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability |
| CVE-2017-5677 | HA Html Ajax Pear | 9.8 | Feb 6 | PEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer |
| CVE-2009-4111 | MA Mail Pear | – | Nov 29 | Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and possibly other versions for PEAR allows remote attackers to read and write arbitrary… |
| CVE-2009-4025 | PE Pear Pear | – | Nov 29 | Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary… |
| CVE-2009-4024 | PE Pear Pear | – | Nov 29 | Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before 2.4.5 for PEAR allows remote attackers to execute arbitrary shell commands via the… |
| CVE-2009-4023 | PE Pear Pear | – | Nov 29 | Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read… |
| CVE-2007-5934 | SD Structures Datagrid Datasource Mdb2 Pear | – | Nov 13 | The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote… |
| CVE-2007-3628 | SD Structures Datagrid Datasource Mdb2 Pear | – | Jul 9 | Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting… |
| CVE-2006-0932 | PA Pear Archive Zip Pear | – | Feb 28 | Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP… |
| CVE-2006-0931 | PA Pear Archive Tar Pear | – | Feb 28 | Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted… |
| CVE-2006-0869 | PL Pear Liveuser Pear | – | Feb 23 | Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote… |
| CVE-2006-0868 | XR Xml Rpc Pear | – | Feb 23 | Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify… |
| CVE-2005-4730 | TP Text Password Pear | – | Dec 31 | Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable… |