2019-03-09 - CVE Archive

CVE-2019-9640 HIGH POC PATCH This Week

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Buffer Overflow Information Disclosure Ubuntu Linux Debian Linux +3

NVD

CVSS 3.1

7.5

EPSS

6.2%

CVE-2019-9639 HIGH POC PATCH This Week

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Information Disclosure Debian Linux Ubuntu Linux Leap +2

NVD

CVSS 3.1

7.5

EPSS

8.2%

CVE-2019-9638 HIGH POC PATCH This Week

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Buffer Overflow Information Disclosure Debian Linux Ubuntu Linux +3

NVD

CVSS 3.1

7.5

EPSS

6.7%

CVE-2019-9637 HIGH PATCH This Week

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Privilege Escalation PHP Debian Linux Ubuntu Linux Leap +1

NVD

CVSS 3.0

7.5

EPSS

7.3%