ZeusQA
Start free

Known exploited vulnerabilities

PEAR vulnerabilities attackers have used

Every PEAR vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 PEAR vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2020-36193, added Aug 25, 2022. Archive_Tar has the most entries (2).

In KEV, all time
2
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every PEAR entry in CISA KEV

  1. CVE-2020-36193

    Added · due

    PEAR Archive_Tar Improper Link Resolution Vulnerability

    PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for…

  2. CVE-2020-28949

    Added · due

    PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

    PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works