Vulnerabilidades em pear
9 resultadosAnálise Vexday
A PEAR apresenta um portfólio reduzido de 9 vulnerabilidades, sem nenhuma sob ataque ativo atualmente. Três vulnerabilidades críticas (CVSS) foram identificadas, predominantemente relacionadas a injeção SQL (CWE-89), representando a fraqueza estrutural mais relevante. O panorama de risco não apresenta atividade recente de disclosure nos últimos 90 dias, indicando estabilidade relativa na superfície de ataque conhecida.
CVE-2026-25241CRITICALPEAR is Vulnerable to SQL Injection in /get/<package>/<version> EndpointEPSS 0.4%CVE-2026-25237CRITICALPEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update EmailsEPSS 0.4%CVE-2026-25233HIGHPEAR Has a Roadmap Authorization Bypass via Operator Precedence BugEPSS 0.3%CVE-2026-25236MEDIUMPEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal SubstitutionEPSS 0.3%CVE-2026-25240MEDIUMPEAR is Vulnerable to SQL Injection in user::maintains() Role IN() FilterEPSS 0.3%CVE-2026-25238CRITICALPEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email ValidationEPSS 0.3%CVE-2026-25234MEDIUMPEAR is Vulnerable to SQL Injection in Category DeletionEPSS 0.3%CVE-2026-25235HIGHPEAR Has a Predictable Verification Hash in Election Account RequestsEPSS 0.3%CVE-2026-25239HIGHPEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped FilenameEPSS 0.2%