Known vulnerabilities in php-pear (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:php-pear_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 4
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php-pear (Debian package) php-pear (Debian package) is affected by 4 known vulnerabilities: 3 high, 1 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49907 - UNIX Symbolic Link (Symlink) Following
CVE-2020-36193
CWE-61 High
Available
Exploited
1:1.10.6+submodules+notgz-1.1+deb10u2 18.01.2021 SB2021012112
SB2021012113
SB2021012410
and 20 more
#VU48668 - Improper input validation
CVE-2020-28949
CWE-20 High
Available
Exploited
1.10.6+submodules+notgz-1.1+deb10u1 19.11.2020 SB2020112607
SB2020112608
SB2020112609
and 20 more
#VU48669 - Deserialization of Untrusted Data
CVE-2020-28948
CWE-502 High
Available
No
1.10.6+submodules+notgz-1.1+deb10u1 19.11.2020 SB2020112607
SB2020112608
SB2020112609
and 21 more
#VU17066 - Deserialization of Untrusted Data
CVE-2018-1000888
CWE-502 Medium
Available
No
1:1.10.1+submodules+notgz-9+deb9u1 17.01.2019 SB2018122808
SB2019013101
SB2020061525
and 1 more