https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:59:35.577129+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-118153 EUVD-2026-118153 2026-10-03T23:59:35.666104+00:00 EUVD-2026-118153 https://cve.radiocsirt.org/vuln/fkie_cve-2010-1128 fkie_cve-2010-1128 2026-10-03T23:59:35.666143+00:00

The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were intended to be unpredictable, as demonstrated by session cookies generated by using the uniqid function.

 https://cve.radiocsirt.org/vuln/ghsa-59wc-4gch-hhw5 GHSA-59wc-4gch-hhw5 2026-10-03T23:59:35.666177+00:00

The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were intended to be unpredictable, as demonstrated by session cookies generated by using the uniqid function.

 https://cve.radiocsirt.org/vuln/gsd-2010-1128 gsd-2010-1128 2026-10-03T23:59:35.666196+00:00 gsd-2010-1128 https://cve.radiocsirt.org/vuln/rhsa-2010:0919 RHSA-2010:0919 — Red Hat Security Advisory: php security update 2026-10-03T23:59:35.666208+00:00

php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string php: NULL pointer dereference in XML-RPC extension php: LCG entropy weakness php: fnmatch long pattern stack memory exhaustion (MOPS-2010-021) php: information leak vulnerability in var_export() php: session serializer session data injection vulnerability (MOPS-2010-060) php: XSS mitigation bypass via utf8_decode()