CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 32 Last 7 days 2,662 Total CVEs 401,272 CISA KEV 1,733 Critical 42,403 All stats

Filters: Vendor: Phpunit Project Clear all

Page 1

CVE-2026-41570 HIGH

PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes

CVSS 7.8 EPSS 0.28% May 8, 2026

CVE-2026-24765 HIGH

PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling

CVSS 7.8 EPSS 0.39% Jan 27, 2026

CVE-2017-9841 KEV CRITICAL

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a…

CVSS 9.8 EPSS 100.00% Jun 27, 2017

CVE-2013-4744 LOW

Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via un…

CVSS 1.3 EPSS 1.40% Jul 1, 2013

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2026-41570	PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes	HIGH	7.8	0.28%	May 8, 2026
CVE-2026-24765	PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling	HIGH	7.8	0.39%	Jan 27, 2026
CVE-2017-9841 KEV	Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a…	CRITICAL	9.8	100.00%	Jun 27, 2017
CVE-2013-4744	Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via un…	LOW	1.3	1.40%	Jul 1, 2013

Rows per page

Showing 1 to 4 CVEs · page 1