https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:42:29.699677+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2010-avi-385 certa-2010-avi-385 — Plusieurs vulnérabilités dans PHP ont été publiées et corrigées. 2026-10-03T01:42:29.749929+00:00 certa-2010-avi-385 https://cve.radiocsirt.org/vuln/euvd-2026-119291 EUVD-2026-119291 2026-10-03T01:42:29.749970+00:00 EUVD-2026-119291 https://cve.radiocsirt.org/vuln/fkie_cve-2010-2531 fkie_cve-2010-2531 2026-10-03T01:42:29.749985+00:00

The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.

 https://cve.radiocsirt.org/vuln/ghsa-cpj2-grx5-hpg2 GHSA-cpj2-grx5-hpg2 2026-10-03T01:42:29.750014+00:00

The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.

 https://cve.radiocsirt.org/vuln/gsd-2010-2531 gsd-2010-2531 2026-10-03T01:42:29.750030+00:00 gsd-2010-2531 https://cve.radiocsirt.org/vuln/rhsa-2010:0919 RHSA-2010:0919 — Red Hat Security Advisory: php security update 2026-10-03T01:42:29.750041+00:00

php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string php: NULL pointer dereference in XML-RPC extension php: LCG entropy weakness php: fnmatch long pattern stack memory exhaustion (MOPS-2010-021) php: information leak vulnerability in var_export() php: session serializer session data injection vulnerability (MOPS-2010-060) php: XSS mitigation bypass via utf8_decode()