2019-03-09 - CVE Archive

CVE-2019-9640 Mar 09, 00:29 HIGH POC PATCH This Week

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Buffer Overflow Information Disclosure Debian Red Hat +8

NVD

CVSS 3.1

7.5

EPSS

6.2%

CVE-2019-9639 Mar 09, 00:29 HIGH POC PATCH This Week

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Information Disclosure Debian Red Hat Canonical +7

NVD

CVSS 3.1

7.5

EPSS

8.2%

CVE-2019-9638 Mar 09, 00:29 HIGH POC PATCH This Week

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Buffer Overflow Information Disclosure Debian Red Hat +8

NVD

CVSS 3.1

7.5

EPSS

6.7%

CVE-2019-9637 Mar 09, 00:29 HIGH PATCH This Week

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP Privilege Escalation Debian Canonical Debian Linux +5

NVD

CVSS 3.0

7.5

EPSS

7.3%