Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how pear compares to other vendors in security performance

View Risk Score →

PEAR PEARPEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint

Risk 61
Severity
9.8
EPSS
0.11%
First published (updated )
CVE-2026-25241

pear/pearPEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2026-25240

pear/pearPEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename

Risk 31
Severity
8.2
EPSS
0.04%
First published (updated )
CVE-2026-25239

PEAR PEARPEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2026-25238

pear/pearPEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails

Risk 61
Severity
9.8
EPSS
0.11%
First published (updated )
CVE-2026-25237
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pear/pearPEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2026-25236

pear/pearPEAR Has a Predictable Verification Hash in Election Account Requests

Risk 31
Severity
8.2
EPSS
0.04%
First published (updated )
CVE-2026-25235

pear/pearPEAR is Vulnerable to SQL Injection in Category Deletion

Risk 61
Severity
9.8
EPSS
0.03%
First published (updated )
CVE-2026-25234

pear/pearPEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug

Risk 47
Severity
9.1
EPSS
0.05%
First published (updated )
CVE-2026-25233

PEAR HTTP_Request2XSS

Risk 26
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2025-43717
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

PEAR Crypt GpgThe Crypt_GPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which…

Risk 27
Severity
5.3
First published (updated )
CVE-2022-24953

Fedoraproject FedoraPEAR Archive_Tar Improper Link Resolution Vulnerability

Risk 65
Severity
7.5
Exploited
First published (updated )
CVE-2020-36193

Fedoraproject FedoraPEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

Risk 86
Severity
7.8
Exploited
First published (updated )
CVE-2020-28949

PEAR Html AjaxPEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. I…

Risk 86
Severity
9.8
First published (updated )
CVE-2017-5677

PEAR MailCode Injection

Risk 47
Severity
6.8
First published (updated )
CVE-2009-4111
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

PEAR PEARCode Injection

Risk 87
Severity
10
First published (updated )
CVE-2009-4024

PEAR PEARCode Injection

Risk 52
Severity
7.5
First published (updated )
CVE-2009-4023

PEAR PEAROS Command Injection

Risk 87
Severity
10
First published (updated )
CVE-2009-4025

PEAR Structures Datagrid Datasource Mdb2Infoleak

Risk 22
Severity
4.3
First published (updated )
CVE-2007-5934

PEAR Structures Datagrid Datasource Mdb2Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-M…

Risk 26
Severity
5
First published (updated )
CVE-2007-3628
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

PEAR Pear Archive TarPath Traversal

Risk 69
Severity
9.1
First published (updated )
CVE-2006-0931

PEAR Pear Archive ZipDirectory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers …

Risk 26
Severity
5
First published (updated )
CVE-2006-0932

PEAR Pear LiveuserDirectory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and …

Risk 40
Severity
6.4
First published (updated )
CVE-2006-0869

PEAR Xml RpcMultiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Aut…

Risk 54
Severity
7.5
First published (updated )
CVE-2006-0868

PEAR Text PasswordUnspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related t…

Risk 87
Severity
10
First published (updated )
CVE-2005-4730
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

PEAR Xml RpcCode Injection

Risk 52
Severity
7.5
First published (updated )
CVE-2005-1921

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203