https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:37:18.093368+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02642 bdu:2022-02642 2026-10-02T10:37:18.310250+00:00 bdu:2022-02642 https://cve.radiocsirt.org/vuln/cnvd-2015-01028 cnvd-2015-01028 2026-10-02T10:37:18.310290+00:00 cnvd-2015-01028 https://cve.radiocsirt.org/vuln/euvd-2026-108715 EUVD-2026-108715 2026-10-02T10:37:18.310305+00:00 EUVD-2026-108715 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6501 fkie_cve-2013-6501 2026-10-02T10:37:18.310316+00:00

The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.

 https://cve.radiocsirt.org/vuln/fsa-202402 FSA-202402 — Several Vulnerabilities in MES PC (Windows 10) 2026-10-02T10:37:18.310344+00:00

MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.

MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic's Factory Control Panel application.

 https://cve.radiocsirt.org/vuln/ghsa-x247-pp49-3c7r GHSA-x247-pp49-3c7r 2026-10-02T10:37:18.310444+00:00

The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.

 https://cve.radiocsirt.org/vuln/gsd-2013-6501 gsd-2013-6501 2026-10-02T10:37:18.310460+00:00 gsd-2013-6501 https://cve.radiocsirt.org/vuln/icsa-26-027-02 ICSA-26-027-02 — Festo Didactic SE MES PC 2026-10-02T10:37:18.310471+00:00

MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.

MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic's Factory Control Panel application.

 https://cve.radiocsirt.org/vuln/suse-su-2015:0370-1 SUSE-SU-2015:0370-1 — Security update for php53 2026-10-02T10:37:18.310564+00:00

Security update for php53

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6501 UBUNTU-CVE-2013-6501 2026-10-02T10:37:18.310604+00:00

Affected: Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0

The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0069 WID-SEC-W-2023-0069 — PHP: Mehrere Schwachstellen 2026-10-02T10:37:18.310627+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder einen Denial of Service Zustand herbeizuführen.