https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:16.819062+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02645 bdu:2022-02645 2026-10-02T17:29:17.084140+00:00 bdu:2022-02645 https://cve.radiocsirt.org/vuln/cnvd-2016-02628 cnvd-2016-02628 2026-10-02T17:29:17.084201+00:00 cnvd-2016-02628 https://cve.radiocsirt.org/vuln/euvd-2026-104038 EUVD-2026-104038 2026-10-02T17:29:17.084225+00:00 EUVD-2026-104038 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9767 fkie_cve-2014-9767 2026-10-02T17:29:17.084244+00:00

Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.

 https://cve.radiocsirt.org/vuln/ghsa-4gmr-f4gg-2jhp GHSA-4gmr-f4gg-2jhp 2026-10-02T17:29:17.084287+00:00

Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.

 https://cve.radiocsirt.org/vuln/gsd-2014-9767 gsd-2014-9767 2026-10-02T17:29:17.084311+00:00 gsd-2014-9767 https://cve.radiocsirt.org/vuln/rhsa-2016:2750 RHSA-2016:2750 — Red Hat Security Advisory: rh-php56 security, bug fix, and enhancement update 2026-10-02T17:29:17.084329+00:00

gd: incorrect boundary adjustment in _gdContributionsCalc php: ZipArchive:: extractTo allows for directory traversal when creating directories pcre: heap buffer overflow in compile_branch() pcre: heap buffer over-read in pcre_compile2() (8.37/23) pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19) pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20) pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) pcre: stack overflow caused by mishandled group empty match (8.38/11) pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) pcre: Buffer overflow caused by duplicate named references (8.38/36) pcre: Buffer overflow caused by repeated conditional group (8.38/3) pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30) pcre: Buffer overflow caused by lookbehind assertion (8.38/6) pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) pcre: inefficient posix character class syntax check (8.38/16) pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27) pcre: Buffer overflow caused by duplicate named references (8.38/36) php: type confusion issue i…

 https://cve.radiocsirt.org/vuln/suse-su-2016:1145-1 SUSE-SU-2016:1145-1 — Security update for php53 2026-10-02T17:29:17.084523+00:00

Security update for php53

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9767 UBUNTU-CVE-2014-9767 2026-10-02T17:29:17.084555+00:00

Affected: Ubuntu:14.04:LTS: php5, Ubuntu:16.04:LTS: hhvm

Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.