https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:52:55.490291+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04416 bdu:2021-04416 2026-10-02T18:52:55.534512+00:00 bdu:2021-04416 https://cve.radiocsirt.org/vuln/certa-2012-avi-246 certa-2012-avi-246 — Une vulnérabilité a été corrigée dans <span class="textit">PHP</span>. Elle concerne l'implémentation CGI et permet de… 2026-10-02T18:52:55.534559+00:00 certa-2012-avi-246 https://cve.radiocsirt.org/vuln/euvd-2026-258952 EUVD-2026-258952 2026-10-02T18:52:55.534581+00:00 EUVD-2026-258952 https://cve.radiocsirt.org/vuln/fkie_cve-2012-1823 fkie_cve-2012-1823 2026-10-02T18:52:55.534594+00:00

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

 https://cve.radiocsirt.org/vuln/ghsa-3p37-hv77-x3rp GHSA-3p37-hv77-x3rp 2026-10-02T18:52:55.534625+00:00

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

 https://cve.radiocsirt.org/vuln/gsd-2012-1823 gsd-2012-1823 2026-10-02T18:52:55.534642+00:00 gsd-2012-1823 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 openSUSE-SU-2024:10290-1 — apache2-mod_php7-7.0.14-1.4 on GA media 2026-10-02T18:52:55.534653+00:00

apache2-mod_php7-7.0.14-1.4 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2012:0546 RHSA-2012:0546 — Red Hat Security Advisory: php security update 2026-10-02T18:52:55.534707+00:00

php: command line arguments injection when run in CGI mode (VU#520827)