[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2016-4072":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":531,"aliases":532,"duplicate_of":9,"upstream":533,"downstream":534,"duplicates":545,"related":546,"reserved_at":9,"published_at":547,"modified_at":548,"state":549,"summary":550,"references_raw":559,"kevs":640,"epss":641,"epss_history":644,"metrics":895,"affected":904},"CVE-2016-4072","The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \\0 characters by the phar_analyze_path function in ext/phar/phar.c.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-20","Improper Input Validation","The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","weakness","Stable","Class","High",[20,24,28,32,36,40,44,48,232,236,240,244,248,252,256,260,264,268,272,276,280,284,325,329,333,381,385,389,393,397,401,451,455,459,463,467,471,475,479,483,487,491,495,499,503,507,511,515,519,523,527],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-101","Server Side Include (SSI) Injection",[],{"id":29,"name":30,"techniques":31},"CAPEC-104","Cross Zone Scripting",[],{"id":33,"name":34,"techniques":35},"CAPEC-108","Command Line Execution through SQL Injection",[],{"id":37,"name":38,"techniques":39},"CAPEC-109","Object Relational Mapping Injection",[],{"id":41,"name":42,"techniques":43},"CAPEC-110","SQL Injection through SOAP Parameter Tampering",[],{"id":45,"name":46,"techniques":47},"CAPEC-120","Double Encoding",[],{"id":49,"name":50,"techniques":51},"CAPEC-13","Subverting Environment Variable Values",[52,150,192],{"id":53,"name":54,"tactics":55,"countermeasures":62},"T1562.003","Impair Command History Logging",[56,59],{"id":57,"name":58},"TA0030","Defense Evasion",{"id":60,"name":61},"TA0005","Stealth",[63,68,73,77,81,85,90,94,99,104,108,112,117,121,126,130,134,138,142,146],{"id":64,"name":65,"tactic":66},"D3-CI","Configuration Inventory",{"name":67},"Model",{"id":69,"name":70,"tactic":71},"D3-FA","File Analysis",{"name":72},"Detect",{"id":74,"name":75,"tactic":76},"D3-FIM","File Integrity Monitoring",{"name":72},{"id":78,"name":79,"tactic":80},"D3-DA","Dynamic Analysis",{"name":72},{"id":82,"name":83,"tactic":84},"D3-EFA","Emulated File Analysis",{"name":72},{"id":86,"name":87,"tactic":88},"D3-FEV","File Eviction",{"name":89},"Evict",{"id":91,"name":92,"tactic":93},"D3-RKD","Registry Key Deletion",{"name":89},{"id":95,"name":96,"tactic":97},"D3-DF","Decoy File",{"name":98},"Deceive",{"id":100,"name":101,"tactic":102},"D3-DRA","Disable Remote Access",{"name":103},"Harden",{"id":105,"name":106,"tactic":107},"D3-ACH","Application Configuration Hardening",{"name":103},{"id":109,"name":110,"tactic":111},"D3-FE","File Encryption",{"name":103},{"id":113,"name":114,"tactic":115},"D3-RC","Restore Configuration",{"name":116},"Restore",{"id":118,"name":119,"tactic":120},"D3-RF","Restore File",{"name":116},{"id":122,"name":123,"tactic":124},"D3-CQ","Content Quarantine",{"name":125},"Isolate",{"id":127,"name":128,"tactic":129},"D3-CF","Content Filtering",{"name":125},{"id":131,"name":132,"tactic":133},"D3-LFP","Local File Permissions",{"name":125},{"id":135,"name":136,"tactic":137},"D3-RFAM","Remote File Access Mediation",{"name":125},{"id":139,"name":140,"tactic":141},"D3-CM","Content Modification",{"name":125},{"id":143,"name":144,"tactic":145},"D3-EAL","Executable Allowlisting",{"name":125},{"id":147,"name":148,"tactic":149},"D3-EDL","Executable Denylisting",{"name":125},{"id":151,"name":152,"tactics":153,"countermeasures":165},"T1574.006","Dynamic Linker Hijacking",[154,157,160,161,162],{"id":155,"name":156},"TA0110","Persistence",{"id":158,"name":159},"TA0111","Privilege Escalation",{"id":57,"name":58},{"id":60,"name":61},{"id":163,"name":164},"TA0104","Execution",[166,170,172,174,176,178,180,182,184,186,188,190],{"id":167,"name":168,"tactic":169},"D3-SFA","System File Analysis",{"name":72},{"id":69,"name":70,"tactic":171},{"name":72},{"id":74,"name":75,"tactic":173},{"name":72},{"id":86,"name":87,"tactic":175},{"name":89},{"id":95,"name":96,"tactic":177},{"name":98},{"id":109,"name":110,"tactic":179},{"name":103},{"id":118,"name":119,"tactic":181},{"name":116},{"id":127,"name":128,"tactic":183},{"name":125},{"id":131,"name":132,"tactic":185},{"name":125},{"id":135,"name":136,"tactic":187},{"name":125},{"id":122,"name":123,"tactic":189},{"name":125},{"id":139,"name":140,"tactic":191},{"name":125},{"id":193,"name":194,"tactics":195,"countermeasures":201},"T1574.007","Path Interception by PATH Environment Variable",[196,197,198,199,200],{"id":155,"name":156},{"id":158,"name":159},{"id":57,"name":58},{"id":60,"name":61},{"id":163,"name":164},[202,204,206,208,210,212,214,216,218,220,222,224,226,228,230],{"id":69,"name":70,"tactic":203},{"name":72},{"id":74,"name":75,"tactic":205},{"name":72},{"id":78,"name":79,"tactic":207},{"name":72},{"id":82,"name":83,"tactic":209},{"name":72},{"id":86,"name":87,"tactic":211},{"name":89},{"id":95,"name":96,"tactic":213},{"name":98},{"id":109,"name":110,"tactic":215},{"name":103},{"id":118,"name":119,"tactic":217},{"name":116},{"id":127,"name":128,"tactic":219},{"name":125},{"id":131,"name":132,"tactic":221},{"name":125},{"id":135,"name":136,"tactic":223},{"name":125},{"id":122,"name":123,"tactic":225},{"name":125},{"id":139,"name":140,"tactic":227},{"name":125},{"id":143,"name":144,"tactic":229},{"name":125},{"id":147,"name":148,"tactic":231},{"name":125},{"id":233,"name":234,"techniques":235},"CAPEC-135","Format String Injection",[],{"id":237,"name":238,"techniques":239},"CAPEC-136","LDAP Injection",[],{"id":241,"name":242,"techniques":243},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":245,"name":246,"techniques":247},"CAPEC-153","Input Data Manipulation",[],{"id":249,"name":250,"techniques":251},"CAPEC-182","Flash Injection",[],{"id":253,"name":254,"techniques":255},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":257,"name":258,"techniques":259},"CAPEC-22","Exploiting Trust in Client",[],{"id":261,"name":262,"techniques":263},"CAPEC-23","File Content Injection",[],{"id":265,"name":266,"techniques":267},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":269,"name":270,"techniques":271},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":273,"name":274,"techniques":275},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":277,"name":278,"techniques":279},"CAPEC-250","XML Injection",[],{"id":281,"name":282,"techniques":283},"CAPEC-261","Fuzzing for garnering other adjacent user/sensitive data",[],{"id":285,"name":286,"techniques":287},"CAPEC-267","Leverage Alternate Encoding",[288],{"id":289,"name":290,"tactics":291,"countermeasures":294},"T1027","Obfuscated Files or Information",[292,293],{"id":57,"name":58},{"id":60,"name":61},[295,297,299,301,303,305,307,309,311,313,315,317,319,321,323],{"id":69,"name":70,"tactic":296},{"name":72},{"id":74,"name":75,"tactic":298},{"name":72},{"id":78,"name":79,"tactic":300},{"name":72},{"id":82,"name":83,"tactic":302},{"name":72},{"id":86,"name":87,"tactic":304},{"name":89},{"id":95,"name":96,"tactic":306},{"name":98},{"id":109,"name":110,"tactic":308},{"name":103},{"id":118,"name":119,"tactic":310},{"name":116},{"id":127,"name":128,"tactic":312},{"name":125},{"id":131,"name":132,"tactic":314},{"name":125},{"id":135,"name":136,"tactic":316},{"name":125},{"id":122,"name":123,"tactic":318},{"name":125},{"id":139,"name":140,"tactic":320},{"name":125},{"id":143,"name":144,"tactic":322},{"name":125},{"id":147,"name":148,"tactic":324},{"name":125},{"id":326,"name":327,"techniques":328},"CAPEC-28","Fuzzing",[],{"id":330,"name":331,"techniques":332},"CAPEC-3","Using Leading 'Ghost' Character Sequences to Bypass Input Filters",[],{"id":334,"name":335,"techniques":336},"CAPEC-31","Accessing/Intercepting/Modifying HTTP Cookies",[337],{"id":338,"name":339,"tactics":340,"countermeasures":344},"T1539","Steal Web Session Cookie",[341],{"id":342,"name":343},"TA0031","Credential Access",[345,349,353,357,361,365,369,373,377],{"id":346,"name":347,"tactic":348},"D3-CCSA","Credential Compromise Scope Analysis",{"name":72},{"id":350,"name":351,"tactic":352},"D3-CR","Credential Revocation",{"name":89},{"id":354,"name":355,"tactic":356},"D3-ANCI","Authentication Cache Invalidation",{"name":89},{"id":358,"name":359,"tactic":360},"D3-DUC","Decoy User Credential",{"name":98},{"id":362,"name":363,"tactic":364},"D3-CH","Credential Hardening",{"name":103},{"id":366,"name":367,"tactic":368},"D3-MFA","Multi-factor Authentication",{"name":103},{"id":370,"name":371,"tactic":372},"D3-CRO","Credential Rotation",{"name":103},{"id":374,"name":375,"tactic":376},"D3-RIC","Reissue Credential",{"name":116},{"id":378,"name":379,"tactic":380},"D3-CTS","Credential Transmission Scoping",{"name":125},{"id":382,"name":383,"techniques":384},"CAPEC-42","MIME Conversion",[],{"id":386,"name":387,"techniques":388},"CAPEC-43","Exploiting Multiple Input Interpretation Layers",[],{"id":390,"name":391,"techniques":392},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":394,"name":395,"techniques":396},"CAPEC-46","Overflow Variables and Tags",[],{"id":398,"name":399,"techniques":400},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":402,"name":403,"techniques":404},"CAPEC-473","Signature Spoof",[405,442],{"id":406,"name":407,"tactics":408,"countermeasures":411},"T1036.001","Invalid Code Signature",[409,410],{"id":57,"name":58},{"id":60,"name":61},[412,414,416,418,420,422,424,426,428,430,432,434,436,438,440],{"id":69,"name":70,"tactic":413},{"name":72},{"id":74,"name":75,"tactic":415},{"name":72},{"id":78,"name":79,"tactic":417},{"name":72},{"id":82,"name":83,"tactic":419},{"name":72},{"id":86,"name":87,"tactic":421},{"name":89},{"id":95,"name":96,"tactic":423},{"name":98},{"id":109,"name":110,"tactic":425},{"name":103},{"id":118,"name":119,"tactic":427},{"name":116},{"id":127,"name":128,"tactic":429},{"name":125},{"id":131,"name":132,"tactic":431},{"name":125},{"id":135,"name":136,"tactic":433},{"name":125},{"id":122,"name":123,"tactic":435},{"name":125},{"id":139,"name":140,"tactic":437},{"name":125},{"id":143,"name":144,"tactic":439},{"name":125},{"id":147,"name":148,"tactic":441},{"name":125},{"id":443,"name":444,"tactics":445,"countermeasures":450},"T1553.002","Code Signing",[446,447],{"id":57,"name":58},{"id":448,"name":449},"TA0112","Defense Impairment",[],{"id":452,"name":453,"techniques":454},"CAPEC-52","Embedding NULL Bytes",[],{"id":456,"name":457,"techniques":458},"CAPEC-53","Postfix, Null Terminate, and Backslash",[],{"id":460,"name":461,"techniques":462},"CAPEC-588","DOM-Based XSS",[],{"id":464,"name":465,"techniques":466},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":468,"name":469,"techniques":470},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":472,"name":473,"techniques":474},"CAPEC-664","Server Side Request Forgery",[],{"id":476,"name":477,"techniques":478},"CAPEC-67","String Format Overflow in syslog()",[],{"id":480,"name":481,"techniques":482},"CAPEC-7","Blind SQL Injection",[],{"id":484,"name":485,"techniques":486},"CAPEC-71","Using Unicode Encoding to Bypass Validation Logic",[],{"id":488,"name":489,"techniques":490},"CAPEC-72","URL Encoding",[],{"id":492,"name":493,"techniques":494},"CAPEC-73","User-Controlled Filename",[],{"id":496,"name":497,"techniques":498},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":500,"name":501,"techniques":502},"CAPEC-79","Using Slashes in Alternate Encoding",[],{"id":504,"name":505,"techniques":506},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":508,"name":509,"techniques":510},"CAPEC-80","Using UTF-8 Encoding to Bypass Validation Logic",[],{"id":512,"name":513,"techniques":514},"CAPEC-81","Web Server Logs Tampering",[],{"id":516,"name":517,"techniques":518},"CAPEC-83","XPath Injection",[],{"id":520,"name":521,"techniques":522},"CAPEC-85","AJAX Footprinting",[],{"id":524,"name":525,"techniques":526},"CAPEC-88","OS Command Injection",[],{"id":528,"name":529,"techniques":530},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],[],[],[],[535,537,539,541,543],{"_key":536},"DLA-499-1",{"_key":538},"DSA-3560-1",{"_key":540},"UBUNTU-CVE-2016-4072",{"_key":542},"USN-2984-1",{"_key":544},"RHSA-2016:2750",[],[],"2016-05-20T10:00:00.000Z","2024-08-06T00:17:30.790Z","Modified",{"cisa_kev":551,"cisa_ransomware":551,"cisa_vendor":9,"epss_severity":552,"epss_score":553,"severity":554,"severity_score":555,"severity_version":556,"severity_source":557,"severity_vector":558,"severity_status":549},false,"medium",0.11136,"critical",9.8,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[560,567,572,576,581,585,590,595,599,603,608,612,618,622,626,630,634],{"url":561,"sources":562,"tags":564},"http://www.ubuntu.com/usn/USN-2952-1",[563,557],"cve.org",[565,566],"Vendor Advisory","X Refsource UBUNTU",{"url":568,"sources":569,"tags":570},"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",[563,557],[571],"X Refsource CONFIRM",{"url":573,"sources":574,"tags":575},"http://www.php.net/ChangeLog-7.php",[563,557],[571],{"url":577,"sources":578,"tags":579},"https://security.gentoo.org/glsa/201611-22",[563,557],[565,580],"X Refsource GENTOO",{"url":582,"sources":583,"tags":584},"https://support.apple.com/HT206567",[563,557],[571],{"url":586,"sources":587,"tags":588},"http://rhn.redhat.com/errata/RHSA-2016-2750.html",[563,557],[565,589],"X Refsource REDHAT",{"url":591,"sources":592,"tags":593},"http://www.debian.org/security/2016/dsa-3560",[563,557],[565,594],"X Refsource DEBIAN",{"url":596,"sources":597,"tags":598},"http://www.ubuntu.com/usn/USN-2952-2",[563,557],[565,566],{"url":600,"sources":601,"tags":602},"https://bugs.php.net/bug.php?id=71860",[563,557],[571],{"url":604,"sources":605,"tags":606},"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html",[563,557],[565,607],"X Refsource APPLE",{"url":609,"sources":610,"tags":611},"http://www.php.net/ChangeLog-5.php",[563,557],[571],{"url":613,"sources":614,"tags":615},"http://www.securityfocus.com/bid/85993",[563,557],[616,617],"VDB Entry","X Refsource BID",{"url":619,"sources":620,"tags":621},"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",[563,557],[571],{"url":623,"sources":624,"tags":625},"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1e9b175204e3286d64dfd6c9f09151c31b5e099a",[563,557],[571],{"url":627,"sources":628,"tags":629},"https://gist.github.com/smalyshev/80b5c2909832872f2ba2",[563,557],[571],{"url":631,"sources":632,"tags":633},"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",[563,557],[571],{"url":635,"sources":636,"tags":637},"http://www.openwall.com/lists/oss-security/2016/04/24/1",[563,557],[638,639],"Mailing List","X Refsource MLIST",[],{"date":642,"score":553,"percentile":643},"2026-06-04",0.93614,[645,648,651,654,657,660,663,665,668,671,674,677,680,683,685,688,691,694,697,700,703,706,709,711,713,716,719,721,724,727,730,733,736,738,741,744,747,750,753,756,759,762,765,767,770,773,776,779,781,783,785,788,791,794,798,801,804,807,810,813,816,819,821,823,825,827,830,832,835,837,840,842,845,847,850,853,856,859,862,865,868,871,874,877,880,882,885,887,890,892],{"date":646,"score":553,"percentile":647},"2025-11-04",0.9314,{"date":649,"score":553,"percentile":650},"2025-11-05",0.93141,{"date":652,"score":553,"percentile":653},"2025-11-06",0.93143,{"date":655,"score":553,"percentile":656},"2025-11-07",0.93148,{"date":658,"score":553,"percentile":659},"2025-11-08",0.93147,{"date":661,"score":553,"percentile":662},"2025-11-09",0.93145,{"date":664,"score":553,"percentile":662},"2025-11-10",{"date":666,"score":553,"percentile":667},"2025-11-11",0.9315,{"date":669,"score":553,"percentile":670},"2025-11-12",0.93156,{"date":672,"score":553,"percentile":673},"2025-11-13",0.93159,{"date":675,"score":553,"percentile":676},"2025-11-14",0.93161,{"date":678,"score":553,"percentile":679},"2025-11-15",0.93155,{"date":681,"score":553,"percentile":682},"2025-11-16",0.9316,{"date":684,"score":553,"percentile":673},"2025-11-17",{"date":686,"score":553,"percentile":687},"2025-11-18",0.92752,{"date":689,"score":553,"percentile":690},"2025-11-19",0.92756,{"date":692,"score":553,"percentile":693},"2025-11-20",0.9276,{"date":695,"score":553,"percentile":696},"2025-11-21",0.93174,{"date":698,"score":553,"percentile":699},"2025-11-22",0.93173,{"date":701,"score":553,"percentile":702},"2025-11-23",0.93177,{"date":704,"score":553,"percentile":705},"2025-11-24",0.93178,{"date":707,"score":553,"percentile":708},"2025-11-25",0.9318,{"date":710,"score":553,"percentile":705},"2025-11-26",{"date":712,"score":553,"percentile":705},"2025-11-27",{"date":714,"score":553,"percentile":715},"2025-11-28",0.93172,{"date":717,"score":553,"percentile":718},"2025-11-29",0.93181,{"date":720,"score":553,"percentile":718},"2025-11-30",{"date":722,"score":553,"percentile":723},"2025-12-01",0.93226,{"date":725,"score":553,"percentile":726},"2025-12-02",0.93231,{"date":728,"score":553,"percentile":729},"2025-12-03",0.93233,{"date":731,"score":553,"percentile":732},"2025-12-04",0.93187,{"date":734,"score":553,"percentile":735},"2025-12-05",0.93191,{"date":737,"score":553,"percentile":735},"2025-12-06",{"date":739,"score":553,"percentile":740},"2025-12-07",0.93192,{"date":742,"score":553,"percentile":743},"2025-12-08",0.93196,{"date":745,"score":553,"percentile":746},"2025-12-09",0.93198,{"date":748,"score":553,"percentile":749},"2025-12-10",0.93202,{"date":751,"score":553,"percentile":752},"2025-12-11",0.93207,{"date":754,"score":553,"percentile":755},"2025-12-12",0.93211,{"date":757,"score":553,"percentile":758},"2025-12-13",0.93216,{"date":760,"score":553,"percentile":761},"2025-12-14",0.93214,{"date":763,"score":553,"percentile":764},"2025-12-15",0.93217,{"date":766,"score":553,"percentile":761},"2025-12-16",{"date":768,"score":553,"percentile":769},"2025-12-17",0.9322,{"date":771,"score":553,"percentile":772},"2025-12-18",0.93224,{"date":774,"score":553,"percentile":775},"2025-12-19",0.93225,{"date":777,"score":553,"percentile":778},"2025-12-20",0.93222,{"date":780,"score":553,"percentile":772},"2025-12-21",{"date":782,"score":553,"percentile":729},"2025-12-22",{"date":784,"score":553,"percentile":772},"2025-12-23",{"date":786,"score":553,"percentile":787},"2025-12-24",0.93229,{"date":789,"score":553,"percentile":790},"2025-12-25",0.93244,{"date":792,"score":553,"percentile":793},"2025-12-26",0.93242,{"date":795,"score":796,"percentile":797},"2025-12-27",0.05703,0.90168,{"date":799,"score":553,"percentile":800},"2025-12-28",0.93239,{"date":802,"score":553,"percentile":803},"2025-12-29",0.93236,{"date":805,"score":553,"percentile":806},"2025-12-30",0.93238,{"date":808,"score":553,"percentile":809},"2025-12-31",0.93243,{"date":811,"score":553,"percentile":812},"2026-01-01",0.93278,{"date":814,"score":553,"percentile":815},"2026-01-02",0.93273,{"date":817,"score":553,"percentile":818},"2026-01-03",0.93272,{"date":820,"score":553,"percentile":729},"2026-01-04",{"date":822,"score":553,"percentile":787},"2026-01-05",{"date":824,"score":553,"percentile":726},"2026-01-06",{"date":826,"score":553,"percentile":726},"2026-01-07",{"date":828,"score":553,"percentile":829},"2026-01-08",0.93234,{"date":831,"score":553,"percentile":806},"2026-01-09",{"date":833,"score":553,"percentile":834},"2026-01-10",0.9324,{"date":836,"score":553,"percentile":806},"2026-01-11",{"date":838,"score":553,"percentile":839},"2026-01-12",0.93237,{"date":841,"score":553,"percentile":803},"2026-01-13",{"date":843,"score":553,"percentile":844},"2026-01-14",0.93245,{"date":846,"score":553,"percentile":844},"2026-01-15",{"date":848,"score":553,"percentile":849},"2026-01-16",0.93249,{"date":851,"score":553,"percentile":852},"2026-01-17",0.93252,{"date":854,"score":553,"percentile":855},"2026-01-18",0.93246,{"date":857,"score":553,"percentile":858},"2026-01-19",0.93247,{"date":860,"score":553,"percentile":861},"2026-01-20",0.93248,{"date":863,"score":553,"percentile":864},"2026-01-21",0.93253,{"date":866,"score":553,"percentile":867},"2026-01-22",0.93256,{"date":869,"score":553,"percentile":870},"2026-01-23",0.93261,{"date":872,"score":553,"percentile":873},"2026-01-24",0.93266,{"date":875,"score":553,"percentile":876},"2026-01-25",0.93268,{"date":878,"score":553,"percentile":879},"2026-01-26",0.9327,{"date":881,"score":553,"percentile":818},"2026-01-27",{"date":883,"score":553,"percentile":884},"2026-01-28",0.93277,{"date":886,"score":553,"percentile":884},"2026-01-29",{"date":888,"score":553,"percentile":889},"2026-01-30",0.93276,{"date":891,"score":553,"percentile":812},"2026-01-31",{"date":893,"score":553,"percentile":894},"2026-02-01",0.93313,[896],{"source":557,"cvss_v2_0":897,"cvss_v3_0":902,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":898,"baseSeverity":9,"vectorString":899,"impactScore":900,"exploitabilityScore":901},7.5,"AV:N/AC:L/Au:N/C:P/I:P/A:P",6.4,10,{"baseScore":555,"baseSeverity":903,"vectorString":558,"impactScore":555,"exploitabilityScore":901},"CRITICAL",[905,917],{"ecosystem":9,"name":906,"vendor":907,"product":908,"cpe_part":909,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":910},"mac os x","apple","mac_os_x","o",[911],{"version":912,"is_range":913,"range_type":914,"version_start":9,"version_start_type":9,"version_end":915,"version_end_type":916,"fixed_in":9},"lte10.11.4",true,"cpe","10.11.4","including",{"ecosystem":9,"name":918,"vendor":9,"product":918,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":919},"PHP",[920,922,924,926,928,930,932,934,936,938,940,942,944,946,948,950,952,954,956,958,960,962,964,966,968,970,972,974,976,978,980,982,984,986,988,990,992,994,996,998,1000,1002,1004,1006,1008,1010,1012,1014,1016,1018,1020,1022,1024,1026,1028,1030,1032,1034,1036,1038,1040,1042,1044,1046,1048,1050,1052,1054,1056,1058,1060,1062,1064,1066,1068,1070,1072,1074],{"version":921,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.0:alpha1",{"version":923,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.0:alpha2",{"version":925,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.0:alpha3",{"version":927,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.0:alpha4",{"version":929,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.0:alpha5",{"version":931,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.0:beta1",{"version":933,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.0:beta2",{"version":935,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.0:beta3",{"version":937,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.0:beta4",{"version":939,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.1",{"version":941,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.2",{"version":943,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.3",{"version":945,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.4",{"version":947,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.5",{"version":949,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.6",{"version":951,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.7",{"version":953,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.8",{"version":955,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.9",{"version":957,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.10",{"version":959,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.11",{"version":961,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.12",{"version":963,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.13",{"version":965,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.14",{"version":967,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.15",{"version":969,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.16",{"version":971,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.17",{"version":973,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.18",{"version":975,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.6.19",{"version":977,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0.0",{"version":979,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0.1",{"version":981,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0.2",{"version":983,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0.3",{"version":985,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0.4",{"version":987,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0",{"version":989,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:alpha1",{"version":991,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:alpha2",{"version":993,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:alpha3",{"version":995,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:alpha4",{"version":997,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:alpha5",{"version":999,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:alpha6",{"version":1001,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:beta1",{"version":1003,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:beta2",{"version":1005,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:beta3",{"version":1007,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:beta4",{"version":1009,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:rc1",{"version":1011,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0:rc2",{"version":1013,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.1",{"version":1015,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.2",{"version":1017,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.3",{"version":1019,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.4",{"version":1021,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.5",{"version":1023,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.6",{"version":1025,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.7",{"version":1027,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.8",{"version":1029,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.9",{"version":1031,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.10",{"version":1033,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.11",{"version":1035,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.12",{"version":1037,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.13",{"version":1039,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.14",{"version":1041,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.15",{"version":1043,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.16",{"version":1045,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.17",{"version":1047,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.18",{"version":1049,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.19",{"version":1051,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.20",{"version":1053,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.21",{"version":1055,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.22",{"version":1057,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.23",{"version":1059,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.24",{"version":1061,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.25",{"version":1063,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.26",{"version":1065,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.27",{"version":1067,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.29",{"version":1069,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.30",{"version":1071,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.31",{"version":1073,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.32",{"version":1075,"is_range":551,"range_type":914,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.33"]