https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:09:35.056249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-480 certfr-2014-avi-480 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">Juniper</span>. Certaines d'entre… 2026-10-05T01:09:35.064906+00:00 certfr-2014-avi-480 https://cve.radiocsirt.org/vuln/euvd-2026-114707 EUVD-2026-114707 2026-10-05T01:09:35.064950+00:00 EUVD-2026-114707 https://cve.radiocsirt.org/vuln/fkie_cve-2011-1398 fkie_cve-2011-1398 2026-10-05T01:09:35.064964+00:00

The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome.

 https://cve.radiocsirt.org/vuln/ghsa-g6fq-45x6-cmh4 GHSA-g6fq-45x6-cmh4 2026-10-05T01:09:35.064994+00:00

The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome.

 https://cve.radiocsirt.org/vuln/gsd-2011-1398 gsd-2011-1398 2026-10-05T01:09:35.065010+00:00 gsd-2011-1398 https://cve.radiocsirt.org/vuln/rhsa-2013:0514 RHSA-2013:0514 — Red Hat Security Advisory: php security, bug fix and enhancement update 2026-10-05T01:09:35.065021+00:00

PHP: sapi_header_op() %0D sequence handling security bypass php: PG(magic_quote_gpc) was not restored on shutdown php: Integer Signedness issues in _php_stream_scandir