[{"CVE":"CVE-2018-1000888","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1669615","bugzilla_description":"CVE-2018-1000888 php-pear: Unsafe deserialization of data in Archive_Tar class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000888.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-5630","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1418771","bugzilla_description":"CVE-2017-5630 php-pear: File overwrite by malicious server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2014-5459","severity":"moderate","public_date":"2014-08-25T00:00:00Z","advisories":[],"bugzilla":"1133753","bugzilla_description":"CVE-2014-5459 php-pear: insecure temporary file use for cache data","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5459.json"},{"CVE":"CVE-2011-1072","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":["RHSA-2011:1741"],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-pear-1:1.9.4-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1072.json"},{"CVE":"CVE-2011-1144","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":[],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1144.json"}]