https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:01:24.281529+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02526 bdu:2022-02526 2026-10-02T18:01:24.390181+00:00 bdu:2022-02526 https://cve.radiocsirt.org/vuln/bell-cve-2015-7803 Withdrawn: BELL-CVE-2015-7803 — CVE-2015-7803 does not affect BellSoft software 2026-10-02T18:01:24.390232+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2015-avi-534 certfr-2015-avi-534 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apple OS X</span>. Certaines d'entre elles perm… 2026-10-02T18:01:24.390252+00:00 certfr-2015-avi-534 https://cve.radiocsirt.org/vuln/cnvd-2015-07258 cnvd-2015-07258 2026-10-02T18:01:24.390269+00:00 cnvd-2015-07258 https://cve.radiocsirt.org/vuln/euvd-2026-95235 EUVD-2026-95235 2026-10-02T18:01:24.390281+00:00 EUVD-2026-95235 https://cve.radiocsirt.org/vuln/fkie_cve-2015-7803 fkie_cve-2015-7803 2026-10-02T18:01:24.390291+00:00

The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.

 https://cve.radiocsirt.org/vuln/ghsa-xcr5-h66f-mcfq GHSA-xcr5-h66f-mcfq 2026-10-02T18:01:24.390320+00:00

The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.

 https://cve.radiocsirt.org/vuln/gsd-2015-7803 gsd-2015-7803 2026-10-02T18:01:24.390334+00:00 gsd-2015-7803 https://cve.radiocsirt.org/vuln/rhsa-2016:0457 RHSA-2016:0457 — Red Hat Security Advisory: rh-php56-php security update 2026-10-02T18:01:24.390345+00:00

php: segmentation fault in Phar::convertToData on invalid file php: buffer overflow and stack smashing error in phar_fix_filepath php: Use After Free Vulnerability in unserialize() php: dangling pointer in the unserialization of ArrayObject items php: Files from archive can be extracted outside of destination directory using phar php: multiple unserialization use-after-free issues php: use-after-free vulnerability in session deserializer php: SOAP serialize_function_call() type confusion php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in phar_get_fp_offset() php: uninitialized pointer in phar_make_dirstream()

 https://cve.radiocsirt.org/vuln/suse-su-2016:0284-1 SUSE-SU-2016:0284-1 — Security update for php5 2026-10-02T18:01:24.390381+00:00

Security update for php5

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7803 UBUNTU-CVE-2015-7803 2026-10-02T18:01:24.390397+00:00

Affected: Ubuntu:14.04:LTS: php5

The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.