Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2020-36193

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

CVSS 7.5 · HighBuzz score 56.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 56.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 19.5 · diversity 11.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
19.5
6 evidence mentions in the snapshot
Diversity score
11.5
3 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
6 source links · newest first
  • CISA adds 10 new flaws to its Known Exploited Vulnerabilities CatalogSecurity Affairs

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added 10 new flaws to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added 10 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, including a high-severity security flaw (CVE-2021-38406 CVSS score: 7.8) impacting Delta Electronics industrial automation software. According to Binding Operational Directive (BOD) 22-01: […]

    newssecurityaffairs.comAug 29, 2022, 9:03 AM
  • CISA: Vulnerability in ​​Delta Electronics ICS Software Exploited in AttacksSecurityWeek

    A vulnerability affecting industrial automation software from Delta Electronics appears to have been exploited in attacks, and the US Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to take action as soon as possible.

    newswww.securityweek.comAug 26, 2022, 10:28 AM
  • Experts discovered 15-Year-Old vulnerabilities in the PEAR PHP repositorySecurity Affairs

    SonarSource discovered a 15-year-old flaw in the PEAR PHP repository that could have enabled supply chain attacks. Researchers from SonarSource discovered two 15-year-old security flaws in the PEAR (PHP Extension and Application Repository) repository that could have enabled supply chain attacks. PEAR is a framework and distribution system for reusable PHP components. According to the expert, […]

    newssecurityaffairs.comApr 4, 2022, 5:36 AM
  • 25th January – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 25th January, please download our Threat Intelligence Bulletin. Top Attacks and Breaches The CHwapi hospital in Belgium has been hit by BitLocker, encrypting 40 of its servers and 100 TB of data. The attack caused the hospital to redirect patients and delay surgical procedures. […]

    vendorresearch.checkpoint.comJan 25, 2021, 3:49 PM
  • Drupal fixed a new flaw related PEAR Archive_Tar librarySecurity Affairs

    Drupal development team released security updates to address a vulnerability that resides in the PEAR Archive_Tar third-party library. The Drupal development team has released security updates to address the CVE-2020-36193 vulnerability in the PEAR Archive_Tar third-party library. The PEAR Archive_Tar class provides handling of tar files in PHP. It supports creating, listing, extracting, and adding […]

    newssecurityaffairs.comJan 22, 2021, 8:25 AM
  • Drupal Updates Patch Another Vulnerability Related to Archive FilesSecurityWeek

    Security updates released this week by the developers of the Drupal content management system (CMS) patch a vulnerability identified in a third-party library.

    newswww.securityweek.comJan 21, 2021, 4:13 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence