https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T08:26:41.638725+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-97818 EUVD-2026-97818 2026-10-15T08:26:41.642068+00:00 EUVD-2026-97818 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1691 fkie_cve-2014-1691 2026-10-15T08:26:41.642121+00:00

The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.

 https://cve.radiocsirt.org/vuln/ghsa-vrpw-h28p-3rfp GHSA-vrpw-h28p-3rfp 2026-10-15T08:26:41.642193+00:00

The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.

 https://cve.radiocsirt.org/vuln/gsd-2014-1691 gsd-2014-1691 2026-10-15T08:26:41.642222+00:00 gsd-2014-1691 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1691 Withdrawn: UBUNTU-CVE-2014-1691 2026-10-15T08:26:41.642242+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: php-horde-util

The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.