https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:21:00.999874+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-355 certfr-2018-avi-355 — De multiples vulnérabilités ont été découvertes dans PHP. Elles permettent à un attaquant de provoquer un problème de s… 2026-10-02T12:21:01.285829+00:00 certfr-2018-avi-355 https://cve.radiocsirt.org/vuln/cnvd-2018-24270 cnvd-2018-24270 2026-10-02T12:21:01.285897+00:00 cnvd-2018-24270 https://cve.radiocsirt.org/vuln/euvd-2026-66104 EUVD-2026-66104 2026-10-02T12:21:01.285914+00:00 EUVD-2026-66104 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12882 fkie_cve-2018-12882 2026-10-02T12:21:01.285926+00:00

exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.

 https://cve.radiocsirt.org/vuln/fsa-202302 FSA-202302 — Festo: Several vulnerabilities in FactoryViews 2026-10-02T12:21:01.285957+00:00

FactoryViews bundles many third-party applications which are used in background processes to provide the software's features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications.

FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities.

At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.

 https://cve.radiocsirt.org/vuln/ghsa-p666-3cc6-g2c6 GHSA-p666-3cc6-g2c6 2026-10-02T12:21:01.286070+00:00

exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.

 https://cve.radiocsirt.org/vuln/gsd-2018-12882 gsd-2018-12882 2026-10-02T12:21:01.286086+00:00 gsd-2018-12882 https://cve.radiocsirt.org/vuln/icsa-26-027-02 ICSA-26-027-02 — Festo Didactic SE MES PC 2026-10-02T12:21:01.286097+00:00

MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.

MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic's Factory Control Panel application.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11167-1 openSUSE-SU-2024:11167-1 — php7-7.4.24-1.1 on GA media 2026-10-02T12:21:01.286194+00:00

php7-7.4.24-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:1886-1 SUSE-SU-2018:1886-1 — Security update for php7 2026-10-02T12:21:01.286244+00:00

Security update for php7

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12882 UBUNTU-CVE-2018-12882 2026-10-02T12:21:01.286261+00:00

Affected: Ubuntu:18.04:LTS: php7.2

exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.