https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:59:16.342994+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-125266 EUVD-2026-125266 2026-10-03T03:59:16.425636+00:00 EUVD-2026-125266 https://cve.radiocsirt.org/vuln/fkie_cve-2009-5016 fkie_cve-2009-5016 2026-10-03T03:59:16.425674+00:00

Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870.

 https://cve.radiocsirt.org/vuln/ghsa-8fg6-84xm-jg65 GHSA-8fg6-84xm-jg65 2026-10-03T03:59:16.425706+00:00

Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870.

 https://cve.radiocsirt.org/vuln/gsd-2009-5016 gsd-2009-5016 2026-10-03T03:59:16.425723+00:00 gsd-2009-5016 https://cve.radiocsirt.org/vuln/rhsa-2010:0919 RHSA-2010:0919 — Red Hat Security Advisory: php security update 2026-10-03T03:59:16.425735+00:00

php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string php: NULL pointer dereference in XML-RPC extension php: LCG entropy weakness php: fnmatch long pattern stack memory exhaustion (MOPS-2010-021) php: information leak vulnerability in var_export() php: session serializer session data injection vulnerability (MOPS-2010-060) php: XSS mitigation bypass via utf8_decode()