https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:21.392305+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-05444 cnvd-2015-05444 2026-10-02T17:29:21.443564+00:00 cnvd-2015-05444 https://cve.radiocsirt.org/vuln/euvd-2026-93197 EUVD-2026-93197 2026-10-02T17:29:21.443604+00:00 EUVD-2026-93197 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5161 fkie_cve-2015-5161 2026-10-02T17:29:21.443619+00:00

The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.

 https://cve.radiocsirt.org/vuln/ghsa-xp8p-9rq5-4wgv GHSA-xp8p-9rq5-4wgv — ZendXml and Zend Framework contain XXE and XEE Vulnerabilities 2026-10-02T17:29:21.443650+00:00

Affected: Packagist: zendframework/zendframework, Packagist: zendframework/zendframework1, Packagist: zendframework/zendxml

The `Zend_Xml_Security::scan` in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.

 https://cve.radiocsirt.org/vuln/gsd-2015-5161 gsd-2015-5161 2026-10-02T17:29:21.443692+00:00 gsd-2015-5161 https://cve.radiocsirt.org/vuln/suse-su-2016:1638-1 SUSE-SU-2016:1638-1 — Security update for php53 2026-10-02T17:29:21.443705+00:00

Security update for php53