https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T19:25:05.941096+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-199 certa-2013-avi-199 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Elles permettent à un attaquant… 2026-10-18T19:25:05.945026+00:00 certa-2013-avi-199 https://cve.radiocsirt.org/vuln/euvd-2026-210812 EUVD-2026-210812 2026-10-18T19:25:05.945082+00:00 EUVD-2026-210812 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3363 fkie_cve-2012-3363 2026-10-18T19:25:05.945099+00:00

Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.

 https://cve.radiocsirt.org/vuln/ghsa-7pg4-5233-82jv GHSA-7pg4-5233-82jv — Zend Framework XXE Vulnerability 2026-10-18T19:25:05.945128+00:00

Affected: Packagist: zendframework/zendframework1

`Zend_XmlRpc` in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle `SimpleXMLElement` classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.

 https://cve.radiocsirt.org/vuln/gsd-2012-3363 gsd-2012-3363 2026-10-18T19:25:05.945153+00:00 gsd-2012-3363 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-3363 UBUNTU-CVE-2012-3363 2026-10-18T19:25:05.945164+00:00

Affected: Ubuntu:16.04:LTS: zend-framework

Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.